Classifications

• • G—PHYSICS
  • G08—SIGNALLING
  • G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
  • G08B17/00—Fire alarms; Alarms responsive to explosion
• • G—PHYSICS
  • G08—SIGNALLING
  • G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
  • G08B25/00—Alarm systems in which the location of the alarm condition is signalled to a central station, e.g. fire or police telegraphic systems
  • G08B25/001—Alarm cancelling procedures or alarm forwarding decisions, e.g. based on absence of alarm confirmation
• • G—PHYSICS
  • G08—SIGNALLING
  • G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
  • G08B25/00—Alarm systems in which the location of the alarm condition is signalled to a central station, e.g. fire or police telegraphic systems
  • G08B25/007—Details of data content structure of message packets; data protocols
• • G—PHYSICS
  • G08—SIGNALLING
  • G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
  • G08B25/00—Alarm systems in which the location of the alarm condition is signalled to a central station, e.g. fire or police telegraphic systems
  • G08B25/008—Alarm setting and unsetting, i.e. arming or disarming of the security system
• • G—PHYSICS
  • G08—SIGNALLING
  • G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
  • G08B25/00—Alarm systems in which the location of the alarm condition is signalled to a central station, e.g. fire or police telegraphic systems
  • G08B25/01—Alarm systems in which the location of the alarm condition is signalled to a central station, e.g. fire or police telegraphic systems characterised by the transmission medium
  • G08B25/10—Alarm systems in which the location of the alarm condition is signalled to a central station, e.g. fire or police telegraphic systems characterised by the transmission medium using wireless transmission systems
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04B—TRANSMISSION
  • H04B11/00—Transmission systems employing sonic, ultrasonic or infrasonic waves
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W76/00—Connection management
  • H04W76/10—Connection setup
  • H04W76/14—Direct-mode setup

Definitions

• This disclosure relates to systems, devices, methods, and related computer program products for small buildings including the smart home. More particularly, this patent specification relates to devices that use ultrasonic acoustic signals.
• HVAC heating, ventilation, and air conditioning
• one or more devices may have power constraints, network limitations, or constraints on available communication types.
• some devices with power constraints or other limitations may be constrained to use relatively low power networks or communication types.
• these relatively low power connections may have constraints (e.g., unidirectional communication) that interfere with complete connectivity between the devices.
• other devices that are to connect to the one or more devices may only have hardware (e.g., radios) to communicate using a select (e.g., 802.15) communication type.
• some of these devices may include hazard detectors that alarm.
• these hazard detectors may alann when critical events are detected. To hush these alarms, physical contact with the alarming device is often required, but such contact may be difficult when the placement of the device is beyond typical user reach.
• Embodiments of the present disclosure provide methods and systems for enabling remote alarm hushing with acoustic presence verification.
• Acoustic presence verification is used to assure that a device attempting to remotely deactivate an alarm is located within a certain distance of an alarming device before allowing the alarm to be hushed.
• Acoustic presence can be established through emission and monitoring of ultrasonic acoustic signals.
• the ultrasonic acoustic signals may be transmitted at a frequency that exceeds human hearing such as, for example, between 18kHz and 22kHz.
• Such ultrasonic signals have a relatively short range and are unable to penetrate walls and floors, thus providing an effective tool for ensuring that the device attempting to remotely hush an alarming device is within a line-of- sight of the alarming device.
• FIG. 1 illustrates an embodiment of a smart-home environment within which one or more of the devices, methods, systems, services, and/or computer program products described herein may be used, according to an embodiment
• FIG. 2 illustrates a network-level view of an extensible devices and sendees platform with which the smart-home environment of FIG. 1 can be integrated, according to an embodiment
• FIG. 3 illustrates a functional view of the extensible devices and services platform of FIG. 2, with reference to a processing engine as well as devices of the smart-home environment, according to an embodiment
• FIG. 4 illustrates block diagram view of a smart device that may communicate with other devices within or without the smart-home environment, according to an embodiment
• FIG. 5 illustrates a model view that illustrates functions of a communication system in layers including an application layer, a transport layer, and a network layer, according to an embodiment
• FIG. 6 illustrates an exchange of information between devices, with at least one device being part of the smart-home environment, according to an embodiment
• FIG. 7 illustrates a schematic view of BLE interaction between a client and a server, according to an embodiment
• FIG. 8 illustrates a communication interaction between the client and the server of FIG. 7 when the client writes to a characteristic, according to an embodiment
• FIG. 9 illustrates a communication interaction between the client and the server of FIG. 7 when the server writes to a characteristic, according to an embodiment
• FIG. 10 illustrates a block diagram view of interactions between the client and the server of FIG. 7 via a BLE service, according to an embodiment
• FIG. 1 1 illustrates a data packed that may be sent using a Bluetooth transfer protocol, according to an embodiment
• FIG. 12 illustrates a block diagram illustrating an advertisement communication between the client and server of FIG. 7, according to an embodiment
• FIG. 13 illustrates a block diagram of an advertisement including an
• FIG. 14 illustrates a general format advertisement for a BLE connection, according to an embodiment
• FIG. 15 illustrates a critical service advertisement for a BLE connection, according to an embodiment
• FIG. 16 shows block diagrams of an illustrative hazard detection system and an illustrative user device, according to an embodiment
• FIG. 17 illustrates an interconnection between devices used to remotely hush a smart device, according to an embodiment
• FIG. 18 illustrates a flowchart view of a process for hushing an alarm, according to an embodiment
• FIG. 19 illustrates an alert screen used in the process of FIG. 18, according to an embodiment
• FIG. 20 illustrates a hush confirmation screen that may be used in the process of FIG. 18, according to an embodiment
• FIG. 21 illustrates the hush confirmation screen reflecting visual changes during the process of FIG. 18, according to an embodiment
• FIG. 22 illustrates a silencing screen that may be used in the process of FIG. 18, according to an embodiment
• FIG. 23 illustrates a result screen that may be used to indicate success or failure during the process of FIG. 18, according to an embodiment
• FIG. 24 illustrates an updated alert screen of FIG. 1 after a hush has been performed, according to an embodiment
• FIGs. 25A and 25B illustrate a process for hushing and propagating alarms, according to an embodiment
• FIG. 26 illustrates a state machine for an alarm state for a smart device, according to an embodiment
• FIG. 27 shows an illustrative floor plan of a house having hazard device positioned in the kitchen and user devices positioned in the various locations as shown;
• FIG. 28 shows an illustrative acoustic data encoder according to an embodiment
• FIG. 29 shows an illustrative process in which the user device emits an ultrasonic signal for detection by the hazard detection system, according to an embodiment
• FIG. 30 shows an illustrative process in which the hazard detection device emits an ultrasonic signal and the user device monitors for the presence of the ultrasonic signal, according to an embodiment
• FIG. 31 shows an illustrative process for encoding data into and decoding data out of an ultrasonic signal, according to an embodiment
• FIG. 32 shows an illustrative process in which time-of-flight calculations are used to determine location of a user device relative to a hazard detection device, according to an embodiment.
• Embodiments of the present disclosure relate generally to sending relatively sophisticated application layer messages via BLE and using such communications to remotely hush alarms in a smart network.
• “smart home environments” may refer to smart environments or smart networks for any building type, such as single-family houses, duplexes, townhomes, multi-unit apartment buildings, hotels, retail stores, office buildings, industrial buildings, and any building that may include one or more smart devices.
• the customer may be the landlord with respect to purchasing the unit
• the installer may be a local apartment supervisor
• a first user may be the tenant
• a second user may again be the landlord with respect to remote control functionality.
• the identity of the person performing the action may be germane to a particular advantage provided by one or more of the embodiments - for example, the password-protected network commissioning functionality described herein may be particularly advantageous where the landlord holds the sole password and can control network additions - such identity should not be construed in the descriptions that follow as necessarily limiting the scope of the present teachings to those particular individuals having those particular identities.
• FIG. 1 illustrates an example of a smart-home environment 100, also referred to as a smart network, within which one or more of the devices, methods, systems, services, and/or computer program products described further herein can be applicable.
• the depicted smart-home environment 100 includes a
• structure 150 which can include, e.g., a house, office building, garage, or mobile home.
• the devices can also be integrated into a smart-home environment 100 that does not include an entire structure 150, such as an apartment, condominium, or office space.
• the smart home environment can control and/or be coupled to devices outside of the actual structure 150. Indeed, several devices in the smart home environment need not physically be within the structure 150 at all. For example, a device controlling a pool heater or irrigation system can be located outside of the structure 150.
• the depicted structure 150 includes multiple rooms 152, separated at least partly from each other via walls 154.
• the walls 154 can include interior walls or exterior walls.
• Each room can further include a floor 156 and a ceiling 158.
• Devices can be mounted on, integrated with and/or supported by a wall 154, floor 156 or ceiling 158.
• the smart-home environment 100 of FIG. 1 includes various devices, including intelligent, multi-sensing, network-connected devices that may- integrate seamlessly with each other, with a central server, with a cloud-computing system, or some combination of these to provide any of a variety of useful smart-home objectives.
• the smart-home environment 100 may include one or more intelligent, multi-sensing, network- connected thermostats 102 (hereinafter referred to as “smart thermostats 102"), one or more intelligent, network-connected, multi-sensing hazard detection units 104 (hereinafter referred to as “smart hazard detectors 104"), one or more intelligent, multi-sensing, network- connected doorbell devices 106 (hereinafter referred to as “smart doorbells 106"), one or more intelligent, network-connected door locks 107 (hereinafter referred to as “smart door locks 107”), or other device that may interconnect using wired or wireless interfaces.
• the smart thermostat 102 detects ambient climate characteristics (e.g., temperature and/or humidity) and controls a HVAC system 103 accordingly.
• the smart hazard detector 104 may detect the presence of a hazardous substance or a substance indicative of a hazardous substance (e.g., smoke, fire, or carbon monoxide).
• the smart doorbell 106 may detect a person's approach to or departure from a location (e.g., an outer door), control doorbell functionality, announce a person's approach or departure via audio or visual means, or control settings on a security system (e.g., to activate or deactivate the security system when occupants go and come).
• the smart door locks 107 may detect and toggle between a locked and unlocked condition for doors in the home, detect a person's approach to or departure from a respective door, detect whether a door is open or closed, or other suitable controls associated with a smart door lock.
• the smart-home environment 100 of FIG. 1 further includes one or more intelligent, multi-sensing, network-connected wall switches 108 (hereinafter referred to as “smart wall switches 108"), along with one or more intelligent, multi-sensing, network-connected wall plug interfaces 110 (hereinafter referred to as “smart wall plugs 1 10").
• the smart wall switches 108 may detect ambient lighting conditions, detect room- occupancy states, and control a power and/or dim state of one or more lights. In some instances, smart wall switches 108 may also control a power state or speed of a fan, such as a ceiling fan.
• the smart wall plugs 1 10 may detect occupancy of a room or enclosure and control supply of power to one or more wall plugs (e.g., such that power is not supplied to the plug if nobody is at home).
• the smart-home environment 100 of FIG. 1 includes multiple intelligent, multi-sensing, network-connected appliances 1 12 (hereinafter referred to as “smart appliances 1 12"), such as refrigerators, stoves and/or ovens, televisions, washers, dryers, lights, stereos, intercom systems, garage-door openers, floor fans, ceiling fans, wall air conditioners, pool heaters, irrigation systems, security systems, window- sensors, security systems, and so forth.
• the network-connected appliances 1 12 may be made compatible with the smart-home environment by cooperating with the respective manufacturers of the appliances.
• the appliances can be space heaters, window AC units, motorized duct vents, etc.
• an appliance When plugged in, an appliance can announce itself to the smart-home network, such as by indicating what type of appliance it is, and it can automatically integrate with the controls of the smart-home. Such communication by the appliance to the smart home can be facilitated by any wired or wireless communication protocols known by those having ordinary skill in the art.
• the smart home also can include a variety of non-communicating legacy appliances 140, such as old conventional washer/dryers, refrigerators, and the like which can be controlled, albeit coarsely (ON/OFF), by virtue of the smart wall plugs 110.
• the smart-home environment 100 can further include a variety of partially communicating legacy appliances 142, such as infrared ("IR”) controlled wall air conditioners or other IR-controlled devices, which can be controlled by IR signals provided by the smart hazard detectors 104 or the smart wall switches 108.
• legacy appliances 142 such as infrared ("IR") controlled wall air conditioners or other IR-controlled devices, which can be controlled by IR signals provided by the smart hazard detectors 104 or the smart wall switches 108.
• the smart thermostats 102, the smart hazard detectors 104, the smart doorbells 106, the smart door lock 107, the smart wall switches 108, the smart wall plugs 1 10, and other devices of the smart-home environment 100 may be modular and may be incorporated into older and new houses.
• the devices are designed around a modular platform consisting of two basic components: a head unit and a back plate, also referred to as a docking station. Multiple configurations of the docking station are provided so as to be compatible with any home, such as older and newer homes.
• all of the docking stations include a standard head-connection arrangement, such that any head unit can be removably attached to any docking station.
• the docking stations are interfaces that serve as physical connections to the structure and the voltage wiring of the homes, and the interchangeable head units contain all of the sensors, processors, user interfaces, the batteries, and other functional components of the devices.
• the head unit can ask the user (by 2D LCD display, 2D/3D holographic projection, voice interaction, etc.) a few simple questions such as, "Where am I" and the user can indicate "living room,” “kitchen,” and so forth.
• the smart-home environment 100 may also include communication with devices outside of the physical home but within a proximate geographical range of the home.
• the smart-home environment 100 may include a pool heater monitor 1 14 that communicates a current pool temperature to other devices within the smart-home environment 100 or receives commands for controlling the pool temperature.
• the smart-home environment 100 may include an irrigation monitor 116 that communicates information regarding irrigation systems within the smart-home environment 100 and/or receives control information for controlling such irrigation systems.
• an algorithm is provided for considering the geographic location of the smart- home environment 100, such as based on the zip code or geographic coordinates of the home. The geographic information then may be used to obtain data helpful for determining optimal times for watering. Such data may include sun location information, temperature, dew point, soil type of the land on which the home is located, etc.
• one or more of the smart-home devices of FIG. 1 can also enable a user to interact with the device even if the user is not proximate to the device.
• a user can communicate with a device using a computer (e.g., a desktop computer, laptop computer, or tablet) or other portable electronic device (e.g., a smartphone) 166.
• a webpage or app can be configured to receive communications from the user and control the device based on the communications and/or to present information about the device's operation to the user.
• the user can view a current setpoint temperature for a device and adjust it using a computer.
• the user can be in the structure during this remote communication or outside the stmcture.
• users can control the smart thermostat and other smart devices in the smart-home environment 100 using a network-connected computer or portable electronic device 166.
• the device 166 may be connected to the smart network directly or through additional networks (e.g., WiFi) that are connected to the smart network using one or more devices (e.g., an edge router).
• additional networks e.g., WiFi
• devices e.g., an edge router
• some or all of the occupants e.g., individuals who live in the home
• An occupant may use their registered device 166 to remotely control the smart devices of the home, such as when the occupant is at work or on vacation.
• the occupant may also use their registered device to control the smart devices when the occupant is actually located inside the home, such as when the occupant is sitting on a couch inside the home.
• the smart-home environment 100 may make inferences about which individuals live in the home and are therefore occupants and which devices 166 are associated with those individuals. As such, the smart-home environment "learns" who is an occupant and permits the devices 166 associated with those individuals to control the smart devices of the home.
• the smart-home environment may receive communication from an unregistered mobile device of an individual inside of the home, where said individual is not recognized as an occupant of the home.
• a smart-home environment may receive communication from a mobile device of an individual who is known to be or who is registered as a guest or determined to be on a common network (e.g., SSID WiFi network) as the smart devices.
• a common network e.g., SSID WiFi network
• each of the devices 102, 104, 106, 107, 108, 110, 1 12, 1 14, 1 16, 162, 170 and other smart devices may be capable of data communications and information sharing with any other of the smart devices, as well as to any central server or cloud-computing system or any other device that is network-connected anywhere in the world.
• the required data communications can be carried out using any of a variety of custom or standard wireless protocols (Wi-Fi, ZigBee, 6L0WPAN, etc.) and/or any of a variety of custom or standard wired protocols (CAT6 Ethernet, Home-Plug, etc.).
• all or some of the smart devices can serve as wireless or wired repeaters.
• a first one of the smart devices can communicate with a second one of the smart device via a wireless router 160.
• the smart devices can further communicate with each other via a connection to a network, such as the Internet 162.
• the smart devices can communicate with a central server or a cloud-computing system 164.
• the central server or cloud-computing system 164 can be associated with a manufacturer, support entity, or service provider associated with the device.
• a user may be able to contact customer support using a device itself rather than needing to use other communication means such as a telephone or Internet- connected computer.
• software updates can be automatically sent from the central server or cloud-computing system 164 to the smart devices (e.g., when available, when purchased, or at routine intervals).
• this mesh network may include spokesman and low-power nodes in the smart-home environment 100, where some of the smart devices are “spokesman” nodes and others are “low-powered” nodes.
• Some of the smart devices in the smart-home environment 100 are battery powered, while others have a regular and reliable power source, such as by connecting to wiring (e.g., to 120V line voltage wires) behind the walls 154 of the smart-home environment.
• the smart devices that have a regular and reliable power source are referred to as "spokesman" nodes.
• nodes are equipped with the capability of using any wireless protocol or manner to facilitate bidirectional communication with any of a variety of other devices in the smart-home environment 100 as well as with the central server or cloud-computing system 164.
• the devices that are battery powered are referred to as "low-power" nodes.
• These nodes tend to be smaller than spokesman nodes and may communicate using wireless protocols that requires very little power, such as
• low-power nodes may also have a relatively low amount of memory to reduce power consumption.
• these low-power nodes utilize streamlined messages and data formats of data (e.g., certificates).
• some, but not all, low-power nodes are incapable of bidirectional communication. These low-power nodes send messages, but they are unable to "listen”. Thus, other devices in the smart-home environment 100, such as the spokesman nodes, cannot send information to these low-power nodes. Additionally or alternatively, these low-power nodes may intermittently enter into low-power states that causes the low-power devices to operate using relatively lower power than a normal state of operation.
• the low-power devices may not receive messages during the low-power states.
• other nodes may hold messages intended for the relatively-low power nodes during these low-power states to broadcast to the respective low-power node when the low-power node exits the low-power state.
• the smart devices serve as low-power and spokesman nodes to create a mesh network in the smart-home environment 100.
• Individual low-power nodes in the smart-home environment regularly send out messages regarding what they are sensing, and the other low-powered nodes in the smart-home environment - in addition to sending out their own messages - repeat the messages, thereby causing the messages to travel from node to node (i.e., device to device) throughout the smart-home environment 100.
• the spokesman nodes in the smart-home environment 100 are able to "drop down" to low-powered communication protocols to receive these messages, translate the messages to other communication protocols, and send the translated messages to other spokesman nodes and/or the central server or cloud-computing system 164.
• the low-powered nodes using low- power communication protocols are able to send messages across the entire smart-home environment 100 as well as over the Internet 162 to the central server or cloud-computing system 164.
• the mesh network enables the central server or cloud-computing system 164 to regularly receive data from all of the smart devices in the home, make inferences based on the data, and send commands back to one of the smart devices to accomplish some of the smart-home objectives described herein.
• the spokesman nodes and some of the low-powered nodes are capable of "listening". Accordingly, users, other devices, and the central server or cloud- computing system 164 can communicate controls to the low-powered nodes.
• a user can use the portable electronic device (e.g., a smartphone) 166 to send commands over the Internet to the central server or cloud-computing system 164, which then relays the commands to the spokesman nodes in the smart-home environment 100.
• the spokesman nodes drop down to a low-power protocol to communicate the commands to the low-power nodes throughout the smart-home environment, as well as to other spokesman nodes that did not receive the commands directly from the central server or cloud-computing system 164.
• a low-power node is a smart nightlight 170.
• the smart nightlight 170 houses an occupancy sensor, such as an ultrasonic or passive IR sensor, and an ambient light sensor, such as a photoresistor or a single-pixel sensor that measures light in the room.
• the smart nightlight 170 is configured to activate the light source when its ambient light sensor detects that the room is dark and when its occupancy sensor detects that someone is in the room. In other embodiments, the smart nightlight 170 is simply configured to activate the light source when its ambient light sensor detects that the room is dark.
• the smart nightlight 170 includes a low-power wireless communication chip (e.g., ZigBee chip) that regularly sends out messages regarding the occupancy of the room and the amount of light in the room, including instantaneous messages coincident with the occupancy sensor detecting the presence of a person in the room.
• these messages may be sent wirelessly, using the mesh network, from node to node (i.e., smart device to smart device) within the smart-home environment 100 as well as over the
• Internet 162 to the central server or cloud-computing system 164.
• low-powered nodes include battery-operated versions of the smart hazard detectors 104.
• These smart hazard detectors 104 are often located in an area without access to constant and reliable power and, as discussed in detail below, may include any number and type of sensors, such as smoke/fire/heat sensors, carbon monoxide/dioxide sensors, occupancy/motion sensors, ambient light sensors, temperature sensors, humidity sensors, and the like.
• smart hazard detectors 104 can send messages that correspond to each of the respective sensors to the other devices and the central server or cloud-computing system 164, such as by using the mesh network as described above.
• Examples of spokesman nodes include smart doorbells 106, smart
• thermostats 102 smart wall switches 108, and smart wall plugs 1 10.
• devices 102, 106, 108, and 1 10 are often located near and connected to a reliable power source, and therefore can include more power-consuming components, such as one or more communication chips capable of bidirectional communication in any variety of protocols.
• these low-powered and spokesman nodes may function as "tripwires" for an alarm system in the smart-home environment.
• the alarm could be triggered upon receiving an occupancy, motion, heat, sound, etc. message from one or more of the low-powered and spokesman nodes in the mesh network.
• the central server or cloud-computing system 164 or some other device could trigger an alarm, provided the alarm is armed at the time of detection.
• the alarm system could be enhanced by various low-powered and spokesman nodes located throughout the smart-home environment 100.
• a user could enhance the security of the smart-home environment 100 by buying and installing extra smart nightlights 170.
• the mesh network can be used to automatically turn on and off lights as a person transitions from room to room.
• the low-powered and spokesman nodes e.g., devices 102, 104, 106, 107, 108, 110, 1 12, and 170
• the central server or cloud-computing system 164 or some other device activates and deactivates the smart wall switches 108 to automatically provide light as the person moves from room to room in the smart-home environment 100.
• users may provide pre-configuration information that indicates which smart wall plugs 1 10 provide power to lamps and other light sources, such as the smart nightlight 170.
• this mapping of light sources to wall plugs 1 10 can be done automatically (e.g., the smart wall plugs 1 10 detect when a light source is plugged into it, and it sends a corresponding message to the central server or cloud-computing system 164).
• the central server or cloud-computing system 164 or some other device activates and deactivates the smart wall plugs 110 that provide power to lamps and other light sources so as to track the person's movement and provide light as the person moves from room to room.
• the mesh network of low-powered and spokesman nodes can be used to provide exit lighting in the event of an emergency or an emergency drill.
• users provide pre-configuration information that indicates exit routes in the smart-home environment 100. For example, for each room in the house, the user may provide a map of the best exit route depending on availability of the route. In some situations the route may be blocked by a hazard, and an alternate route may be illuminated and indicated, if available.
• the central server or cloud-computing system 164 or some other device could automatically determine the routes using uploaded maps, diagrams, architectural drawings of the smart-home house, as well as using a map generated based on positional information obtained from the nodes of the mesh network (e.g., positional information from the devices is used to construct a map of the house).
• the central server or cloud-computing system 164 or some other device uses occupancy information obtained from the low-powered and spokesman nodes to determine which rooms are occupied and then turns on lights (e.g., nightlights 170, wall switches 108, wall plugs 1 10 that power lamps, etc.) along the exit routes from the occupied rooms so as to provide emergency exit lighting.
• lights e.g., nightlights 170, wall switches 108, wall plugs 1 10 that power lamps, etc.
• sendee robots 162 each configured to carry out, in an autonomous manner, any of a variety of household tasks.
• the sendee robots 162 can be respectively configured to perform floor sweeping, floor washing, etc. in a manner similar- to that of known commercially available devices such as the ROOMBA(TM) and SCOOBA(TM) products sold by iRobot, Inc. of Bedford, Massachusetts.
• Tasks such as floor sweeping and floor washing can be considered as "away” or "while-away” tasks for purposes of the instant description, as it is generally more desirable for these tasks to be performed when the occupants are not present.
• one or more of the sendee robots 162 are configured to perform tasks such as playing music for an occupant, serving as a localized thermostat for an occupant, sening as a localized air monitor/purifier for an occupant, sening as a localized baby monitor, sening as a localized hazard detector for an occupant, and so forth, it being generally more desirable for such tasks to be carried out in the immediate presence of the human occupant.
• such tasks can be considered as "human-facing" or "human-centric" tasks.
• a particular one of the sendee robots 162 can be considered to be facilitating what can be called a "personal comfort-area network" for the occupant, with the objective being to keep the occupant's immediate space at a comfortable temperature wherever that occupant may be located in the home.
• a personal comfort-area network for the occupant
• the localized-thermostat sendee robot 162 is configured to move itself into the immediate presence (e.g., within five feet) of a particular occupant who has settled into a particular location in the home (e.g.
• the localized-thermostat service robot 162 includes a temperature sensor, a processor, and wireless communication components configured such that control communications with the HVAC system, either directly or through a wall- mounted wirelessly communicating thermostat coupled to the HVAC system, are maintained and such that the temperature in the immediate vicinity of the occupant is maintained at their desired level. If the occupant then moves and settles into another location (e.g. to the living room couch to watch television), the localized-thermostat service robot 162 proceeds to move and park itself next to the couch and keep that particular immediate space at a comfortable temperature.
• the localized-thermostat sen ice robot 162 can identify and locate the occupant whose personal- area space is to be kept at a comfortable temperature
• RFID sensing e.g., person having an RFID bracelet, RFID necklace, cellular phone RFID, or RFID key fob
• synthetic vision techniques e.g., video cameras and face recognition processors
• audio techniques e.g., voice, sound pattern, vibration pattern recognition
• ultrasound sensing/imaging techniques e.g., and infrared or near-field communication (NFC) techniques (e.g., person wearing an infrared or NFC-capable smartphone), along with rules-based inference engines or artificial intelligence techniques that draw useful conclusions from the sensed information (e.g., if there is only a single occupant present in the home, then that is the person whose immediate space should be kept at a comfortable temperature, and the selection of the desired comfortable temperature should correspond to that occupant's particular stored profile
• RFID sensing e.g., person having an RFID bracelet, RFID necklace,
• a particular service robot 162 can be considered to be facilitating what can be called a "personal health- area network" for the occupant, with the objective being to keep the air quality in the occupant's immediate space at healthy levels.
• other health-related functions can be provided, such as monitoring the temperature or heart rate of the occupant (e.g., using finely remote sensors, near-field communication with on- person monitors, etc.).
• a particular service robot 162 When serving as a localized hazard detector for an occupant, a particular service robot 162 can be considered to be facilitating what can be called a "personal safety-area network" for the occupant, with the objective being to ensure there is no excessive carbon monoxide, smoke, fire, etc., in the immediate space of the occupant.
• Methods analogous to those described above for personal comfort-area networks in terms of occupant identifying and tracking are likewise applicable for personal health-area network and personal safety-area network embodiments.
• the above-referenced facilitation of personal comfort-area networks, personal health-area networks, personal safety-area networks, and/or other such human- facing functionalities of the serv ice robots 162 are further enhanced by logical integration with other smart sensors in the home according to rales-based inferencing techniques or artificial intelligence techniques for achieving better performance of those human-facing functionalities and/or for achieving those goals in energy-conserving or other resource-conserving ways.
• the air monitor/purifier service robot 162 can be configured to detect whether a household pet is moving toward the currently settled location of the occupant (e.g., using onboard sensors and/or by data communications with other smart-home sensors along with rules-based inferencing/artificial intelligence techniques), and if so, the air purifying rate is immediately increased in preparation for the arrival of more airborne pet dander.
• the hazard detector service robot 162 can be advised by other smart-home sensors that the temperature and humidity levels are rising in the kitchen, which is nearby to the occupant's current dining room location, and responsive to this advisory the hazard detector service robot 162 will temporarily raise a hazard detection threshold, such as a smoke detection threshold, under an inference that any small increases in ambient smoke levels will most likely be due to cooking activity and not due to a genuinely hazardous condition.
• a hazard detection threshold such as a smoke detection threshold
• the above-described "human-facing" and “away” functionalities can be provided, without limitation, by multiple distinct sendee robots 162 having respective dedicated ones of such functionalities, by a single service robot 162 having an integration of two or more different ones of such functionalities, and/or any combinations thereof (including the ability for a single service robot 162 to have both "away” and “human facing” functionalities) without departing from the scope of the present teachings.
• Electrical power can be provided by virtue of rechargeable batteries or other rechargeable methods, with FIG. 1 illustrating an exemplary out-of-the-way docking station 164 to which the service robots 162 will automatically dock and recharge its batteries (if needed) during periods of inactivity.
• each service robot 162 includes wireless communication components that facilitate data communications with one or more of the other wirelessly communicating smart-home sensors of FIG. 1 and/or with one or more other sendee robots 162 (e.g., using Wi-Fi, ZigBee, Z-Wave, 6L0WPAN, etc.), and one or more of the smart-home devices of FIG. 1 can be in communication wdth a remote sen er over the Internet.
• each sendee robot 162 can be configured to communicate directly with a remote server by virtue of cellular telephone communications, satellite
• 3G/4G network data communications or other direct communication method.
• inventions Provided according to some embodiments are systems and methods relating to the integration of the service robot(s) 162 with home security sensors and related functionalities of the small home system.
• the embodiments are particularly applicable and advantageous when applied for those service robots 162 that perform "away” functionalities or that othenvise are desirable to be active when the home is unoccupied (hereinafter "away-service robots").
• away-service robots Included in the embodiments are methods and systems for ensuring that home security systems, intrusion detection systems, and/or occupancy-sensitive environmental control systems (for example, occupancy-sensitive automated setback thermostats that enter into a lower-energy-using condition when the home is unoccupied) are not erroneously triggered by the away-sendce robots.
• a home automation and security system e.g., as shown in FIG. 1 that is remotely monitored by a monitoring service by virtue of automated systems (e.g., cloud-based servers or other central servers, hereinafter "central server") that are in data communications with one or more network-connected elements of the home automation and security system.
• the away-semce robots are configured to be in operative data communication with the central server, and are configured such that they remain in a non-away-service state (e.g., a dormant state at their docking station) unless permission is granted from the central server (e.g., by virtue of an "away-service-OK" message from the central server) to commence their away-semce activities.
• An away-state determination made by the system which can be arrived at (i) exclusively by local on- premises smart device(s) based on occupancy sensor data, (ii) exclusively by the central server based on received occupancy sensor data and/or based on received proximity-related information such as GPS coordinates from user smartphones or automobiles, or (iii) any combination of (i) and (ii) can then trigger the granting of away-service permission to the away-service robots by the central server.
• the central sen3 ⁇ 4r can readily filter signals from the occupancy sensing devices to distinguish between the away-sen ice robot activity versus any unexpected intrusion activity, thereby avoiding a false intrusion alarm condition while also ensuring that the home is secure.
• the central server may provide filtering data (such as an expected occupancy-sensing profile triggered by the away-service robots) to the occupancy sensing nodes or associated processing nodes of the smart home, such that the filtering is performed at the local level.
• filtering data such as an expected occupancy-sensing profile triggered by the away-service robots
• the central server may temporarily disable the occupancy sensing equipment for the duration of the away-service robot activity.
• functionality similar to that of the central server in the above example can be performed by an on-site computing device such as a dedicated server computer, a "master" home automation console or panel, or as an adjunct function of one or more of the smart-home devices of FIG. 1.
• an on-site computing device such as a dedicated server computer, a "master" home automation console or panel, or as an adjunct function of one or more of the smart-home devices of FIG. 1.
• the away-service robots are configured to emit a standard ultrasonic sound throughout the course of their away-service activity, the activity sensing systems are configured to detect that standard ultrasonic sound, and the activity sensing systems are further configured such that no disturbance-detected outcome will occur for as long as that standard ultrasonic sound is detected.
• the away-service robots are configured to emit a standard notification signal throughout the course of their away-service activity
• the activity sensing systems are configured to detect that standard notification signal
• the activity sensing systems are further configured such that no disturbance-detected outcome will occur for as long as that standard notification signal is detected
• the standard notification signal comprises one or more of: an optical notifying signal; an audible notifying signal; an infrared notifying signal; an infrasonic notifying signal; a wirelessly transmitted data notification signal (e.g., an IP broadcast, multicast, or unicast notification signal, or a notification message sent in an TCP/IP two-way communication session).
• the notification signals sent by the away-service robots to the activity sensing systems are authenticated and encrypted such that the notifications cannot be learned and replicated by a potential burglar.
• Any of a variety of known encryption/authentication schemes can be used to ensure such data security including, but not limited to, methods involving third party data security sendees or certificate authorities.
• a permission request-response model can be used, wherein any particular away-service robot requests permission from each activity sensing system in the home when it is ready to perform its away-service tasks, and does not initiate such activity until receiving a "yes” or “permission granted” message from each activity sensing system (or from a single activity sensing system serving as a "spokesman” for all of the activity sensing systems).
• One advantage of the described embodiments that do not require a central event orchestrator is that there can (optionally) be more of an arms-length relationship between the suppliers) of the home security/environmental control equipment, on the one hand, and the suppliers) of the away-service robot(s), on the other hand, as it is only required that there is the described standard one-way notification protocol or the described standard two-way request/permission protocol to be agreed upon by the respective suppliers.
• the activity sensing systems are configured to detect sounds, vibrations, RF emissions, or other detectable environmental signals or "signatures" that are intrinsically associated with the away-service activity of each away- service robot, and are further configured such that no disturbance-detected outcome will occur for as long as that particular detectable signal or environmental "signature" is detected.
• a particular kind of vacuum-cleaning away-service robot may emit a specific sound or RF signature.
• the away-service environmental signatures for each of multiple known away-service robots are stored in the memory of the activity sensing systems based on empirically collected data, the environmental signatures being supplied with the activity sensing systems and periodically updated by a remote update server.
• the activity sensing systems can be placed into a "training mode" for the particular home in which they are installed, wherein they “listen” and “learn” the particular environmental signatures of the away-service robots for that home during that training session, and thereafter will suppress disturbance-detected outcomes for intervals in which those environmental signatures are heard.
• sonic or visual sensing may be used to verify that a user is within predetermined range (e.g., range of sonic or visual detection) of the smart device detecting the sonic or visual stimulus.
• the activity sensing system is configured to automatically learn the environmental signatures for the away-service robots by virtue of automatically performing correlations over time between detected environmental signatures and detected occupancy activity.
• an intelligent automated nonoccupancy- triggered setback thermostat such as the Nest Learning Thermostat can be configured to constantly monitor for audible and RF activity as well as to perform infrared-based occupancy detection.
• the environmental signature of the away-service robot will remain relatively constant from event to event, and in view of the fact that the away-service events will likely either (a) themselves be triggered by some sort of nonoccupancy condition as measured by the away-service robots themselves, or (b) occur- at regular times of day, there will be patterns in the collected data by which the events themselves will become apparent and for which the environmental signatures can be readily learned.
• this automatic-learning embodiment in which the environmental signatures of the away-service robots are automatically learned without requiring user interaction, it is more preferable that a certain number of false triggers be tolerable over the course of the learning process.
• this automatic-learning embodiment is more preferable for application in occupancy-sensitive environmental control equipment (such as an automated setback thermostat) rather than home security systems for the reason that a few false occupancy determinations may cause a few instances of unnecessary heating or cooling, but will not otherwise have any serious consequences, whereas false home security alarms may have more serious consequences.
• occupancy-sensitive environmental control equipment such as an automated setback thermostat
• technologies including the sensors of the smart devices located in the mesh network of the smart-home environment in combination with rules-based inference engines or artificial intelligence provided at the central server or cloud- computing system 164 are used to provide a personal "smart alarm clock" for individual occupants of the home.
• user-occupants can communicate with the central server or cloud-computing system 164 via their mobile devices 166 to access an interface for the smart alarm clock.
• occupants can turn on their "smart alarm clock” and input a wake time for the next day and/or for additional days.
• the occupant may have the option of setting a specific wake time for each day of the week, as well as the option of setting some or all of the inputted wake times to "repeat”. Artificial intelligence will be used to consider the occupant's response to these alarms when they go off and make inferences about the user's preferred sleep patterns over time.
• the smart device in the smart-home environment 100 that happens to be closest to the occupant when the occupant falls asleep will be the device that transmits messages regarding when the occupant stopped moving, from which the central server or cloud-computing system 164 will make inferences about where and when the occupant prefers to sleep.
• This closest smart device will as be the device that sounds the alarm to wake the occupant.
• the "smart alarm clock” will follow the occupant throughout the house, by tracking the individual occupants based on their "unique signature", which is determined based on data obtained from sensors located in the smart devices.
• the sensors include ultrasonic sensors, passive IR sensors, and the like.
• the unique signature is based on a combination of walking gait, patterns of movement, voice, height, size, etc. It should be appreciated that facial recognition may also be used.
• the wake times associated with the "smart alarm clock” are used by the smart thermostat 102 to control the FF AC in an efficient manner so as to pre-heat or cool the house to the occupant's desired "sleeping" and "awake” temperature settings.
• the preferred settings can be learned over time, such as by observing which temperature the occupant sets the thermostat to before going to sleep and which temperature the occupant sets the thermostat to upon waking up.
• a device is positioned proximate to the occupant's bed, such as on an adjacent nightstand, and collects data as the occupant sleeps using noise sensors, motion sensors (e.g., ultrasonic, IR, and optical), etc.
• Data may be obtained by the other smart devices in the room as well.
• Such data may include the occupant's breathing patterns, heart rate, movement, etc. Inferences are made based on this data in combination with data that indicates when the occupant actually wakes up. For example, if - on a regular basis - the occupant's heart rate, breathing, and moving all increase by 5% to 10%, twenty to thirty minutes before the occupant wakes up each morning, then predictions can be made regarding when the occupant is going to wake.
• Other devices in the home can use these predictions to provide other smart-home objectives, such as adjusting the smart
• thermostat 102 so as to pre-heat or cool the home to the occupant's desired setting before the occupant wakes up. Further, these predictions can be used to set the "smart alarm clock" for the occupant, to turn on lights, etc.
• technologies including the sensors of the smart devices located throughout the smart-home environment in combination with rales-based inference engines or artificial intelligence provided at the central server or cloud-computing system 164 are used to detect or monitor the progress of Alzheimer's disease.
• the unique signatures of the occupants are used to track the individual occupants' movement throughout the smart-home environment 100. This data can be aggregated and analyzed to identify patterns indicative of Alzheimer's.
• individuals with Alzheimer's have distinctive patterns of migration in their homes. For example, a person will walk to the kitchen and stand there for a while, then to the living room and stand there for a while, and then back to the kitchen. This pattern will take about thirty minutes, and then the person will repeat the pattern.
• the remote servers or cloud computing architectures 164 analyze the person's migration data collected by the mesh network of the smart-home environment to identify such patterns.
• FIG. 2 illustrates a network-level view of an extensible devices and services platform 200 with which multiple smart-home environments, such as the smart-home environment 100 of FIG. 1 , can be integrated .
• the extensible devices and services platform 200 includes remote servers or cloud computing architectures 164. Each of the smart devices can communicate with the remote servers or cloud computing
• a connection to the Internet 162 can be established either directly (for example, using 3G/4G connectivity to a wireless carrier), through a wireless mesh network (which can be a scheme ranging from a simple wireless router, for example, up to and including an intelligent, dedicated whole-home control node), or through any combination thereof.
• the smart network may couple to the Internet 162 using a hub 212.
• the devices and services platform 200 communicates with and collects data from the smart devices of smart-home environment 100 of FIG. 1, it should be appreciated that the devices and sendees platform 200 may communicate with and collect data from multiple smart-home
• the central server or cloud-computing system 164 can collect home data 202 from the devices of one or more smart-home environments, where the devices can routinely transmit home data or can transmit home data in specific instances (e.g., when a device queries the home data 202).
• the devices and services platform 200 may routinely collect data from homes across the world.
• the collected home data 202 includes, for example, power consumption data, occupancy data, HVAC settings and usage data, carbon monoxide levels data, carbon dioxide levels data, volatile organic compounds levels data, sleeping schedule data, cooking schedule data, inside and outside temperature humidity data, television viewership data, inside and outside noise level data, etc.
• the central server or cloud-computing architecture 164 can further provide one or more services 204.
• the services 204 can include, e.g., software updates, customer support, sensor data collection/logging, weather information, account information, remote access, remote or distributed control, or use suggestions (e.g., based on collected home data 202 to improve performance, reduce utility cost, etc.).
• Data associated with the services 204 can be stored at the central server or cloud-computing system 164 and the central server or the cloud-computing system 164 can retrieve and transmit the data at an appropriate time (e.g., at regular intervals, upon receiving a request from a user, etc.).
• an embodiment of the extensible devices and services platform 200 includes a processing engine 206, which can be concentrated at a single server or distributed among several different computing entities without limitation.
• the processing engine 206 can include engines configured to receive data from devices of smart-home environments (e.g., via the Internet or a hu28ed network), to index the data, to analyze the data and/or to generate statistics based on the analysis or as part of the analysis.
• the analyzed data can be stored as derived home data 208.
• Results of the analysis or statistics can thereafter be transmitted back to the device that provided home data used to derive the results, to other devices, to a server providing a webpage to a user of the device, or to other non-device entities.
• use statistics, use statistics relative to use of other devices, use patterns, and/or statistics summarizing sensor readings can be generated by the processing engine 206 and transmitted.
• the results or statistics can be provided via the Internet 162.
• the processing engine 206 can be configured and programmed to derive a variety of useful information from the home data 202.
• a single server can include one or more engines.
• the derived data can be highly beneficial at a variety of different granularities for a variety of useful purposes, ranging from explicit programmed control of the devices on a per-home, per-neighborhood, or per-region basis (for example, demand-response programs for electrical utilities), to the generation of inferential abstractions that can assist on a per- home basis (for example, an inference can be drawn that the homeowner has left for vacation and so security detection equipment can be put on heightened sensitivity), to the generation of statistics and associated inferential abstractions that can be used for government or charitable purposes.
• processing engine 206 can generate statistics about device usage across a population of devices and send the statistics to device users, serv ice providers or other entities (e.g., that have requested or may have provided monetary compensation for the statistics).
• the home data 202, the derived home data 208, and/or another data can be used to create "automated neighborhood safety networks.”
• the central server or cloud-computing architecture 164 receives data indicating that a particular home has been broken into, is experiencing a fire, or some other type of emergency event, an alarm is sent to other smart homes in the "neighborhood.”
• the central server or cloud-computing architecture 164 automatically identifies smart homes within a radius of the home experiencing the emergency and sends an alarm to the identified homes.
• the other homes in the " " neighborhood” do not have to sign up for or register to be a part of a safety network, but instead are notified of an emergency based on their proximity to the location of the emergency.
• neighboring houses may activate irrigation systems to reduce likelihood of a spread of fire.
• this safety network can be an opt- in service and that, in addition to or instead of the central server or cloud-computing architecture 164 selecting which homes to send alerts to, individuals can subscribe to participate in such networks and individuals can specify which homes they want to receive alerts from. This can include, for example, the homes of family members who live in different cities, such that individuals can receive alerts when their loved ones in other locations are experiencing an emergency.
• sound, vibration, and/or motion sensing components of the smart devices are used to detect sound, vibration, and/or motion created by running water. Based on the detected sound, vibration, and/or motion, the central server or cloud-computing architecture 164 makes inferences about water usage in the home and provides related services. For example, the central server or cloud-computing
• the central server or cloud-computing architecture 164 can ran programs/algorithms that recognize what water sounds like and when it is running in the home. According to one embodiment, to map the various water sources of the home, upon detecting running water, the central server or cloud-computing architecture 164 sends a message an occupant's mobile device asking if water is currently running or if water has been recently run in the home and, if so, which room and which water-consumption appliance (e.g., sink, shower, toilet, etc.) was the source of the water. This enables the central server or cloud-computing architecture 164 to determine the "signature" or "fingerprint' ' ' of each water source in the home. This is sometimes referred to herein as "audio fingerprinting water usage.”
• the central server or cloud-computing architecture 164 creates a signature for the toilet in the master bathroom, and whenever that toilet is flushed, the central server or cloud-computing architecture 164 will know that the water usage at that time is associated with that toilet.
• architecture 164 can track the water usage of that toilet as well as each water-consumption application in the home. This information can be correlated to water bills or smart water meters so as to provide users with a breakdown of their water usage.
• sound, vibration, and/or motion sensing components of the smart devices are used to detect sound, vibration, and/or motion created by mice and other rodents as well as by termites, cockroaches, and other insects (collectively referred to as "pests").
• the central server or cloud-computing architecture 164 makes inferences about pest-detection in the home and provides related services.
• the central server or cloud-computing architecture 164 can run programs/algorithms that recognize what certain pests sound like, how they move, and/or the vibration they create, individually and/or collectively.
• the central server or cloud-computing architecture 164 can determine the "signatures" of particular types of pests.
• the central server or cloud-computing architecture 164 detects sounds that may be associated with pests, it notifies the occupants of such sounds and suggests hiring a pest control company. If it is confirmed that pests are indeed present, the occupants input to the central server or cloud-computing architecture 164 confirms that its detection was correct, along with details regarding the identified pests, such as name, type, description, location, quantity, etc. This enables the central server or cloud-computing architecture 164 to "tune" itself for better detection and create "signatures” or "fingerprints” for specific types of pests. For example, the central server or cloud-computing
• the central server or cloud- computing architecture 164 can use the tuning as well as the signatures and fingerprints to detect pests in other homes, such as nearby homes that may be experiencing problems with the same pests. Further, for example, in the event that two or more homes in a "neighborhood" are experiencing problems with the same or similar types of pests, the central server or cloud- computing architecture 164 can make inferences that nearby homes may also have such problems or may be susceptible to having such problems, and it can send warning messages to those homes to help facilitate early detection and prevention.
• the devices and services platform 200 expose a range of application programming interfaces (APIs) 210 to third parties, such as charities 222, governmental entities 224 (e.g., the Food and Drug Administration or the Environmental Protection Agency), academic institutions 226 (e.g., university researchers), businesses 228 (e.g., providing device warranties or sendee to related equipment, targeting advertisements based on home data), utility companies 230, and other third parties.
• the APIs 210 may be coupled to and permit third-party systems to communicate with the central server or the cloud-computing system 164, including the services 204, the processing engine 206, the home data 202, and the derived home data 208.
• APIs 210 may allow applications executed by the third parties to initiate specific data processing tasks that are executed by the central server or the cloud-computing system 164, as well as to receive dynamic updates to the home data 202 and the derived home data 208.
• third parties can develop programs and/or applications, such as web or mobile apps that integrate with the central server or the cloud-computing system 164 to provide sendees and information to users.
• programs and application may be, for example, designed to help users reduce energy consumption, to preemptively sendee faulty equipment, to prepare for high sendee demands, to track past sendee performance, etc., or to perform any of a variety of beneficial functions or tasks now known or hereinafter developed.
• third-party applications make inferences from the home data 202 and the derived home data 208, such inferences may include when are occupants home, when are they sleeping, when are they cooking, when are they in the den watching television, and when do they shower.
• the answers to these questions may help third-parties benefit consumers by providing them with interesting information, products and sendees as well as with providing them with targeted advertisements.
• a shipping company creates an application that makes inferences regarding when people are at home.
• the application uses the inferences to schedule deliveries for times when people will most likely be at home.
• the application can also build delivery routes around these scheduled times. This reduces the number of instances where the shipping company has to make multiple attempts to deliver packages, and it reduces the number of times consumers have to pick up their packages from the shipping company.
• FIG. 3 illustrates a functional view 300 of the extensible devices and sendees platform 200 of FIG. 2, with particular reference to the processing engine 206 as well as devices, such as those of the smart-home environment 100 of FIG. 1.
• devices situated in smart-home environments may have an endless variety of different indiv idual capabilities and limitations, they can all be thought of as sharing common characteristics in that each of them is a data consumer 302 (DC ), a data source 304 (DS), a sendees consumer 306 (SC), and a sendees source 308 (SS).
• DC data consumer 302
• DS data source 304
• SC sendees consumer 306
• SS sendees source 308
• the extensible devices and sendees platform 200 can also be configured to harness the large amount of data that is flowing out of these devices.
• the extensible devices and sendees platform 200 can be directed to "repurposing" that data in a variety of automated, extensible, flexible, and/or scalable ways to achieve a variety of useful objectives. These objectives may be predefined or adaptively identified based on, e.g., usage patterns, device efficiency, and/or user input (e.g., requesting specific functionality). [00100] For example, FIG.
• Processing engine 206 can include a managed services paradigm 310a that monitors and manages primary or secondary device functions.
• the device functions can include ensuring proper operation of a device given user inputs, estimating that (e.g., and responding to an instance in which) an intruder is or is attempting to be in a dwelling, detecting a failure of equipment coupled to the device (e.g., a light bulb having burned out), implementing or otherwise responding to energy demand response events, or alerting a user of a current or predicted future event or characteristic.
• Processing engine 206 can further include an advertising/communication paradigm 310b that estimates characteristics (e.g., demographic information), desires and/or products of interest of a user based on device usage.
• Processing engine 206 can further include a social paradigm 310c that uses information from a social network, provides information to a social network (for example, based on device usage), and/or processes data associated with user and/or device interactions with the social network platform. For example, a user's status as reported to their trusted contacts on the social network could be updated to indicate when they are home based on light detection, security system inactivation or device usage detectors. As another example, a user may be able to share device-usage statistics with other users. In yet another example, a user may share HVAC settings that result in low power bills and other users may download the HVAC settings to their smart thermostat 102 to reduce their power bills.
• a social paradigm 310c uses information from a social network, provides information to a social network (for example, based on device usage), and/or processes data associated with user and/or device interactions with the social network platform. For example, a user's status as reported to their trusted contacts on the social network could be updated to indicate when they are home based on light detection, security system inactiv
• the processing engine 206 can include a challenges/rules/compliance/rewards paradigm 3 lOd that informs a user of challenges, competitions, rules, compliance regulations and/or rewards and/or that uses operation data to determine whether a challenge has been met, a rule or regulation has been complied with and'Or a reward has been earned.
• the challenges, rules or regulations can relate to efforts to conserve energy, to live safely (e.g., reducing exposure to toxins or carcinogens), to conserve money and/or equipment life, to improve health, to conduct safety drills, etc.
• one challenge may involve participants turning down their thermostat by one degree for one week. Those that successfully complete the challenge are rewarded, such as by coupons, virtual currency, status, etc.
• an example involves a rental-property owner making a rule that no renters are permitted to access certain owner's rooms.
• the devices in the room having occupancy sensors could send updates to the owner when the room is accessed.
• the processing engine 206 may integrate or otherwise utilize extrinsic information 316 from extrinsic sources to improve the functioning of one or more processing paradigms.
• Extrinsic information 316 can be used to interpret data received from a device, to determine a characteristic of the environment near the device (e.g., outside a structure that the device is enclosed in), to determine sendees or products available to the user, to identify a social network or social-network information, to determine contact information of entities (e.g., public-service entities such as an emergency-response team, the police or a hospital) near the device, etc., to identify statistical or environmental conditions, trends or other information associated with a home or neighborhood, and so forth.
• entities e.g., public-service entities such as an emergency-response team, the police or a hospital
• each bedroom of the smart- home environment 100 can be provided with a smart wall switch 108, a smart wall plug 1 10, and/or smart hazard detectors 104, all or some of which include an occupancy sensor, wherein the occupancy sensor is also capable of inferring (e.g., by virtue of motion detection, facial recognition, audible sound patterns, etc.) whether the occupant is asleep or awake.
• the remote security/monitoring service or fire department is advised of how many occupants there are in each bedroom, and whether those occupants are still asleep (or immobile) or whether they have properly evacuated the bedroom. While this is, of course, a very advantageous capability accommodated by the described extensible devices and services platform, there can be substantially more "profound” examples that can truly illustrate the potential of a larger "intelligence” that can be made available. By way of perhaps a more "profound” example, the same bedroom occupancy data that is being used for fire safety can also be "repurposed" by the processing engine 206 in the context of a social paradigm of neighborhood child development and education.
• the same bedroom occupancy and motion data discussed in the "ordinary" example can be collected and made available (properly anonymized) for processing in which the sleep patterns of schoolchildren in a particular ZIP code can be identified and tracked. Localized variations in the sleeping patterns of the schoolchildren may be identified and correlated, for example, to different nutrition programs in local schools. II. Smart Devices
• FIG. 4 illustrates an example of a device 410 (e.g., thermostat and/or hazard detector) that may that may communicate with other like devices within a home environment.
• the device 410 may include one or more sensors 412, a user interface component 414, a power supply 416 (e.g., including a line power connection and/or battery), a network interface 418, a processor 420, and the like.
• a power supply 416 e.g., including a line power connection and/or battery
• a network interface 418 e.g., a line power connection and/or battery
• a processor 420 e.g., a processor 420
• Particular sensors 412, user interface components 414, and power-supply configurations may be the same or similar within each device 410.
• each device 410 may include particular sensors 412, user interface
• the sensors 412 may detect various properties such as acceleration, temperature, humidity, water, supplied power, proximity, external motion, device motion, sound signals, ultrasound signals, light signals, fire, smoke, carbon monoxide, global-positioning-satellite (GPS) signals, radio-frequency (RF), other electromagnetic signals, or fields, or the like.
• the sensors 412 may include temperature sensor(s), humidity sensor(s), hazard-related sensor(s) or other environmental sensor(s),
• camera(s) e.g., charged coupled-device or video cameras
• active or passive radiation sensors e.g., GPS receiver(s), radiofrequency identification detector(s) and/or other suitable sensors.
• GPS receiver(s) e.g., GPS receiver(s), radiofrequency identification detector(s) and/or other suitable sensors. While FIG. 4 illustrates an embodiment with a single sensor, many embodiments may include multiple sensors. In some instances, the device 410 may includes one or more primary sensors and one or more secondary sensors.
• the primary sensor(s) may sense data central to the core operation of the device (e.g., sensing a temperature in a thermostat or sensing smoke in a smoke detector), while the secondary sensor(s) may sense other types of data (e.g., motion, light or sound), which can be used for energy-efficiency objectives, security objectives, safety objectives, and/or smart-operation objectives.
• data e.g., sensing a temperature in a thermostat or sensing smoke in a smoke detector
• other types of data e.g., motion, light or sound
• One or more user interface components 414 in the device 410 may receive input from the user and'or present information to the user. The received input may be used to determine one or more settings.
• the user interface components may include a mechanical or virtual component that responds to the user's motion. For example, the user may mechanically move a sliding component (e.g., along a vertical or horizontal track) or rotate a rotatable ring (e.g., along a circular track), or move an object (e.g., finger) across/onto a touchpad of the device 410.
• Such motions may correspond to a setting adjustment, which can be determined based on an absolute position of a user interface component 414 or based on a displacement of a user interface components 414 (e.g., adjusting a set point temperature by 1 degree F for every 10° rotation of a rotatable-ring component).
• Physically and virtually movable user interface components can allow a user to set a setting along a portion of an apparent continuum.
• the user may not be confined to choose between two discrete options (e.g., as would be the case if up and down buttons were used) but can quickly and intuitively define a setting along a range of possible setting values.
• a magnitude of a movement of a user interface component may be associated with a magnitude of a setting adjustment, such that a user may dramatically alter a setting with a large movement or finely tune a setting with s small movement.
• the user interface components 414 may also include one or more buttons (e.g., up and down buttons), a keypad, a number pad, a switch, a microphone, and/or a camera (e.g., to detect gestures).
• the user interface component 414 may include a click-and-rotate annular ring component that may enable the user to interact with the component by rotating the ring (e.g., to adjust a setting) and/or by clicking the ring inwards (e.g., to select an adjusted setting or to select an option).
• the user interface component 414 may include a camera that may detect gestures (e.g., to indicate that a power or alarm state of a device is to be changed).
• the device 410 may have one primary input component, which may be used to set a plurality of types of settings.
• the user interface components 414 may also be configured to present information to a user via, e.g., a visual display (e.g., a thin-film-transistor display or organic light-emitting-diode display) and/or an audio speaker.
• the power-supply component 416 may include a power connection and/or a local battery.
• the power connection may connect the device 410 to a power source such as a line voltage source.
• a power source such as a line voltage source.
• an AC power source can be used to repeatedly charge a (e.g., rechargeable) local battery, such that the battery may be used later to supply power to the device 410 when the AC power source is not available.
• the network interface 418 may include a component that enables the device 410 to communicate between devices.
• the network interface may include multiple network connection interfaces.
• the network interface 418 may include radios and/or antennas that enable to the network interface 418 to couple the device 410 to multiple networks and/or different devices using different communication methods concurrently.
• the network interface 418 may include at least one 802.15.4 radio, at least one WiFi radio, at least one Bluetooth radio, and/or other radios that enable the device to connect to multiple devices and/or networks.
• the network interface 418 may communicate using an efficient network layer as part of its Open Systems Interconnection (OSI) model.
• OSI Open Systems Interconnection
• the efficient network layer which will be described in more detail below with reference to FIG. 5, may enable the device 410 to wirelessly communicate IPv6-type data or traffic using a RIPng routing mechanism and a DTLS security scheme.
• the network interface 418 may include one or more wireless cards or some other transceiver connections.
• the processor 420 may support one or more of a variety of different device functionalities.
• the processor 420 may include one or more processors configured and programmed to carry out and'Or cause to be carried out one or more of the functionalities described herein.
• the processor 420 may include general-purpose processors carrying out computer code stored in local memory (e.g., flash memory, hard drive, and random access memory), special-puipose processors or application-specific integrated circuits, combinations thereof, and/or using other types of
• the processor 420 may be implemented as localized versions or counterparts of algorithms carried out or governed remotely by central servers or cloud-based systems, such as by virtue of running a Java virtual machine (JVM) that executes instructions provided from a cloud server using Asynchronous JavaScript and XML (AJAX) or similar protocols.
• JVM Java virtual machine
• AJAX Asynchronous JavaScript and XML
• the processor 420 may detect when a location (e.g., a house or room) is occupied, up to and including whether it is occupied by a specific person or is occupied by a specific number of people (e.g., relative to one or more thresholds).
• this detection can occur, e.g., by analyzing microphone signals, detecting user movements (e.g., in front of a device), detecting openings and closings of doors or garage doors, detecting wireless signals, detecting an IP address of a received signal, detecting operation of one or more devices within a time window, or the like.
• the processor 420 may include image recognition technology to identify particular occupants or objects.
• the processor 420 may also include a high-power processor and a low-power processor.
• the high-power processor may execute computational intensive operations such as operating the user interface component 414 and the like.
• the low-power processor may manage less complex processes such as detecting a hazard or temperature from the sensor 412. In one embodiment, the low-power processor may wake or initialize the high-power processor for computationally intensive processes.
• the processor 420 may predict desirable settings and/or implement those settings. For example, based on the presence detection, the processor 420 may adjust device settings to, e.g., conserve power when nobody is home or in a particular- room or to accord with user preferences (e.g., general at-home preferences or user-specific preferences). As another example, based on the detection of a particular person, animal or object (e.g., a child, pet or lost object), the processor 420 may initiate an audio or visual indicator of where the person, animal or ob ject is or may initiate an alarm or security feature if an unrecognized person is detected under certain conditions (e.g., at night or when lights are off).
• user preferences e.g., general at-home preferences or user-specific preferences.
• the processor 420 may initiate an audio or visual indicator of where the person, animal or ob ject is or may initiate an alarm or security feature if an unrecognized person is detected under certain conditions (e.g., at night or when lights are off
• devices may interact with each other such that events detected by a first device influences actions of a second device.
• a first device can detect that a smoke has been detected in a garage (e.g., by detecting smoke in the garage, detecting a change in light in the garage, and/or detecting heat in the garage).
• the first device can transmit this information to a second device via the efficient network layer, such that the second device can perform actions appropriate to the transmitted information, (e.g., adjust a home temperature setting, a light setting, a music setting, and/or a security-alarm setting).
• a first device can detect a user approaching a front door (e.g., by detecting motion or sudden light pattern changes).
• the first device may, e.g., cause a general audio or visual signal to be presented (e.g., such as sounding of a doorbell) or cause a location-specific audio or visual signal to be presented (e.g., to announce the visitor's presence within a room that a user is occupying).
• a general audio or visual signal e.g., such as sounding of a doorbell
• a location-specific audio or visual signal e.g., to announce the visitor's presence within a room that a user is occupying.
• the device 410 may include a thermostat such as a Nest® Learning Thermostat.
• the thermostat may include sensors 412 such as temperature sensors, humidity sensors, and the like such that the thermostat may determine present climate conditions within a building where the thermostat is disposed.
• the power-supply component 16 for the thermostat may be a local battery such that the thermostat may be placed anywhere in the building without regard to being placed in close proximity to a continuous power source. Since the thermostat may be powered using a local battery, the thermostat may minimize its energy use such that the battery is rarely replaced.
• the thennostat may include a circular track that may have a rotatable ring disposed thereon as the user interface component 414.
• a user may interact with or program the thermostat using the rotatable ring such that the thermostat controls the temperature of the building by controlling a heating, ventilation, and air- conditioning (HVAC) unit or the like.
• HVAC heating, ventilation, and air- conditioning
• the thermostat may determine when the building may be vacant based on its programming. For instance, if the thermostat is programmed to keep the HVAC unit powered off for an extended period of time, the thermostat may determine that the building will be vacant during this period of time.
• the thennostat may be programmed to turn off light switches or other electronic devices when it determines that the building is vacant.
• the thermostat may use the network interface 418 to communicate with a light switch device such that it may send a signal to the light switch device when the building is determined to be vacant. In this manner, the thermostat may efficiently manage the energy use of the building.
• the smart network may be part of an Open Systems Interconnection (OSI) model 450 as depicted in FIG. 5.
• the OSI model 450 illustrates functions of a communication system with respect to abstraction layers. That is, the OSI model may specify a networking framework or how communications between devices may be implemented.
• the OSI model 450 may include six layers: a physical layer 452, a data link layer 454, a network layer 456, a transport layer 458, a platform layer 460, and an application layer 462.
• each layer in the OSI model 450 may serve the layer above it and may be served by the layer below it.
• the physical layer 452 may provide hardware specifications for devices that may communicate with each other. As such, the physical layer 452 may- establish how devices may connect to each other, assist in managing how communication resources may be shared between devices, and the like.
• the data link layer 454 may specify how data may be transferred between devices. Generally, the data link layer 454 may provide a way in which data packets being transmitted may be encoded and decoded into bits as part of a transmission protocol. [00112] The network layer 456 may specify how the data being transferred to a destination node is routed. The network layer 456 may also interface with a security protocol in the application layer 462 to ensure that the integrity of the data being transferred is maintained.
• the transport layer 458 may specify a transparent transfer of the data from a source node to a destination node.
• the transport layer 458 may also control how the transparent transfer of the data remains reliable. As such, the transport layer 458 may be used to verify that data packets intended to transfer to the destination node indeed reached the destination node.
• Example protocols that may be employed in the transport layer 458 may include Transmission Control Protocol (TCP) and User Datagram Protocol (UDP).
• the platform layer 460 may establish connections between devices according to the protocol specified within the transport layer 458.
• the platform layer 460 may also translate the data packets into a form that the application layer 462 may use.
• the application layer 462 may support a software application that may directly interface with the user.
• the application layer 462 may implement protocols defined by the software application.
• the software application may provide serves such as file transfers, electronic mail, and the like.
• the network layer 456 may route data between the devices 10 using a communication protocol based on Internet Protocol version 6 (IPv6).
• IPv6 Internet Protocol version 6
• each device 410 may include a 128-bit IPv6 address that may provide each device 410 with a unique address to use to identify itself over the Internet, a local network or a fabric overlaying a group of networks, or the like.
• the network layer 456 may identify a protocol (e.g., RIPng) that determines how data is routed between the devices.
• information 470 e.g., alarm states, security information, etc.
• devices 472 and 474 may be exchanged between devices 472 and 474.
• Bluetooth® Low Energy is a wireless personal area network
• BLE provides a Generic Attribute (GATT) profile (as part of the attribute profile) for BLE application use.
• GATT profile provides a mechanism for sending and receiving short pieces of data known as "attributes" over a BLE connection.
• GATT is generally available on most or all implementations of BLE. Thus, although other profiles may be available, GATT may be widely available on smart network devices and/or personal electronic devices (e.g., cellular phone, iPad, etc.).
• GATT is built on the notion of multiple characteristics. Each characteristic has a single, fixed-width value with a maximum size of 512 bytes with most implementations using 128 bytes. Generally, characteristics are assigned Universally Unique Identifiers (UUIDs) having a consistent size (e.g., 16-bit, 128-bit). Characteristics are grouped into sets known as GATT services that each has its own UUID.
• UUIDs Universally Unique Identifiers
• BLE interactions can be characterized as having a client role and a server role as illustrated in FIG. 7.
• GATT interaction 500 includes both a client 502 and a server 504 role.
• the client 502 may also be referred to as a BLE central device, and the server may be referred to as a BLE peripheral device.
• the client device 502 reads data from a server device 504 by issuing a read request 506 to one or more of the server device's characteristics 508.
• the client can issue a write request 510 to update the one or more characteristics 508.
• a general service offers a GATT table that enables both devices to treat BLE as a bi-directional data communication.
• the GATT server 504 hosts the characteristics 508 and provides the GATT client 502 the ability to read, write, and/or subscribe to the characteristics 508. Moreover, since, in some embodiments, the general service is included in all BLE advertisements, the general service may be used to enable bi-directional communication between the devices in numerous use cases, such as device pairing, alarm hushing, or other uses suitable for communicating over BLE. In some embodiments, the GATT server 504 may implement one or more sendees 512 each including one or more characteristics 508 for the bi-directional communication between the devices. Furthermore, in some embodiments, each characteristic 508 may have a different type and/or permissions. For example, a first characteristic 508 may provide the client the ability to read and write while another characteristic 514 provides the client the ability only to read or see indications of the values therein.
• GATT servers advertise GATT services and maintain the canonical values of those services' characteristics.
• GATT clients connect to GATT servers, and may write, read, or subscribe to the value of a server's characteristics. If a client has subscribed to the value of a particular characteristic, the server may change this characteristic's value and then send a GATT indication to notify the client that the value has been updated.
• GATT read requests, write requests, subscribe requests, and indicate requests may be reliably transmitted with acknowledgments received from the server.
• a single GATT characteristic read, write, subscribe, or indication may be considered reliable since GATT is supported by the Logical Link Control and Adaptation Protocol (L2CAP), which in turn is supported by the LE asynchronous connection (LE ACL) logical transport.
• L2CAP Logical Link Control and Adaptation Protocol
• LE ACL LE asynchronous connection
• the size of a maximum transfer unit (MTU) in different BLE implementations can range from a minimum (e.g., 23 bytes) to a maximum (e.g., 512 bytes). These values are decided locally depending on the device's capabilities.
• the MTU size can be negotiated between peers. If neither the client 502 nor the server 504 knows the MTU, the server 504 may respond with an acceptable fragment size (e.g., 20 bytes) as a maximum value that is safe to assume due to the BLE specification. In this case, even if the server 504 receives indications with payload greater than this number bytes, the server 504 may only read the first number (e.g., 20) of bytes of the payload.
• an acceptable fragment size e.g. 20 bytes
• the client 502 will always send 128-byte characteristic writes. In cases where all bytes of characteristic data cannot be transferred in one connection event, multiple connection events are used to transfer the bytes of the characteristic data.
• a fragment size value e.g., 2 ⁇ 16 -1 , unsigned
• FIG. 8 illustrates a communication 518 between the client 502 and the server 504 through the BLE sendee 514 when the client 502 writes to the characteristic 508.
• the client 502 sends an attribute write request 520 to write to one of the attributes of the BLE service 514.
• the BLE service 514 sends a notification 522 to the server 504 that the character 508 has been written to or attempted to be written to.
• the BLE service 514 sends a write response 524 confirmation of success, a notification of failure, and/or other information related to the write request 520.
• a second attribute write request 526 invokes a notification 528 and a write response 530.
• FIG. 9 illustrates a communication 540 when the server 504 writes to the characteristic 514 via the BLE service 512.
• the server 504 updates an attribute in the characteristic 514 in the BLE service 512 with an update request 542, and the write is indicated to the client 502 via a write indication 544.
• the client 502 sends a write confirmation 546 to the BLE serv ice 512 upon completion of a transfer of the written data to the client 502.
• the server 504 may wait to send a second update request 548 until receiving the confirmation 546 to reduce likelihood of data loss.
• an attribute write indication 550 is sent to the client 502 and invokes a confirmation 552. The process continues until a final attribute update request 556 is sent by the serv er 504 that invokes a write indication 554 and a write confirmation 558.
• FIG. 10 illustrates a block diagram view of interactions between the client 502 and the server 504 via the BLE service 512.
• communications flowing from the client 502 to the server 504 flow through the first characteristic 508.
• the client 502 sends data to the server 504 using an attribute write sent 560 via the first characteristic 508.
• the updated first characteristic is sent to the server 504 via a characteristic update notification 562.
• the BLE service 512 sends a write confirmation 564 that notifies the client 502 that another write request may be sent.
• Communications from the server 504 to the client 502 may be sent using the second characteristic 514.
• the server 504 may send a characteristic update request 566 to the BLE service 512.
• an update indication 568 may be sent to the client 502.
• the client 502 sends an indication receipt confirmation 570 that informs the BLE service 512 that the second characteristic 514 may be updated with a new value without risking data loss to the client 502.
• Weave (or other communication protocols) may be transmitted over BLE.
• GATT is a characteristic-based communication protocol while Weave is a message-based protocol.
• a single Weave message payload may be larger than the maximum size of a GATT characteristic.
• a single Weave message may have a size of 1,500 bytes while the BLE implementation may limit communications to a significantly smaller number (e.g., 27 bytes or 128 bytes).
• a higher-level layer e.g., application layer, transport layer, etc.
• BTP Bluetooth Transfer Protocol
• Weave uses BTP to split Weave messages into multiple fragments which may each be transmitted via single GATT writes or indications.
• the MTU may be larger than at least some characteristics.
• a characteristic used to send indications to the BLE client may be limited to the size of the MTU negotiated in the BLE handshake.
• BTP defines its own notion of a transport layer connection on top of the underlying BLE connection.
• This design enables certain Weave protocols to function over BLE, such as a Certificate Authenticated Session Establishment (CASE) protocol or a Password Authenticated Session Establishment (PASE) protocol as taught in U.S. Patent Application No. 14/508,933, titled “Authenticated Session Establishment,” which was filed on October 7, 2014, and which is incorporated by reference in its entirety. It also lets devices using Weave over BLE devices check protocol version compatibility and exchange certain data as part of the BTP connect handshake.
• CASE Certificate Authenticated Session Establishment
• PASE Password Authenticated Session Establishment
• BTP defines 2 GATT characteristics: one for message fragments sent from the GATT client to the server, and the other for fragments sent from the server to the client.
• the client sends fragments to the server on the first characteristic via GATT writes.
• the server uses it to send fragments to the client via GATT indications.
• BTP includes waiting to transmit all but the first message fragment until a GATT write or indication confirmation is received in response to transmission of the previous fragment. If BTP didn't wait for GATT operation acknowledgements before it sent additional fragments, the remote GATT server or client might aggregate all values received for a given characteristic before it acknowledged any of the corresponding GATT operations. Furthermore, in some cases, the server or the client may have substantially larger buffers and/or processing power and may quickly overwhelm the other device if no acknowledgments were used before causing at least some of the fragments to be lost. In other words, only the most recently received value would be passed from the GATT stack to the application layer. This behavior would be correct according to the GATT profile, since characteristic values are last-write-wms, but such behavior would be bad for BTP due to the data loss.
• GATT may provide flow control, error detection, and payload retransmission for individual writes and indications. However, in many implementations, this flow control and much of the core GATT functionality is managed by a separate BLE controller chip independent of a platform's host processor.
• this BLE controller which transmits GATT acknowledgements in response to received write and indication requests.
• the controller may transmit these acknowledgements before the received data has actually made it to the host processor's application program.
• the received data may not be transmitted back up the OSI model stack through the various layers to the application layer. For this reason, GATT acknowledgements may not be adequate to confirm that a given message fragment has been received by a remote BTP application.
• BTP provides an application-layer mechanism to exert back-pressure on the sender. Using this mechanism, a sender knows when to pause further GATT transmissions even if all previous outgoing writes or indications have been acknowledge by the remote BLE controller.
• BLE controllers may experience random resets or drop acknowledged GATT characteristic updates before they are transmitted to the host processor.
• BTP adds functionality to be able to detect and recover from these failures.
• the integrity of data transmitted via GATT may be maintained by L2CAP's payload error detection and retransmission facilities for incomplete message transmissions.
• errors missed by L2CAP's payload error detection to be detected by BTP include those where whole message fragments have been dropped or re-ordered by a malfunctioning BLE controller. If the BLE controller resets during a BTP conversation, it may permanently drop BTP message fragments, even after these fragments have been acknowledge at the GATT layer. BTP may detect this failure scenario and reset the connection when it occurs to reduce the likelihood of message data corruption. If the BLE controller re-orders GATT characteristic writes or indications, BTP may also detect this failure and reset the connection to reduce the likelihood risk message data corruption.
• the BTP stack sends periodic acknowledgements of its most recently received message fragments.
• the BTP stack also closes the connection if it does not receive acknowledgements for its ow r n sent fragments within a set time period.
• Each side (e.g., server and client) of a connection defines a receive window to exert application-layer (relative to GATT) backpressure on a sender when the receiver's queues are full.
• Each side sends periodic keep-alive messages when a BTP connection is open but there is no application data to send.
• FIG. 1 1 illustrates an embodiment of a packet 600 of data that is sent using the BTP.
• the packet 600 includes header flags 602 that identifies a type of message being sent, an acknowledgement number 604 that identifies the message as an acknowledgment of a previous message, a sequence number 606 that identifies order of messages in a string of messages, a message length 608 that indicates a length for the message and/or for each packet, and a fragment pay load 610 that includes the data being shared between the client 502 and the server 504.
• the one or more header flags 602 may be included in a single message.
• a message may include a message fragment and an acknowledgment.
• flag values may be selected from those presented in Table 1 below:
• a start message header indicates that the message includes the message length 608 in the packet 600. In some embodiments, this message length indicates a length of the entire message and not just the data in the currently described packet 600.
• the start message header also indicates that the sequence number 606 and a fragment pay load 610 are included in the packet 600.
• the message data header indicates the presence of a non-terminating message fragment (i.e., not the end of the message) with a data length equal to a negotiated fragment size (MTU) minus the header overhead.
• MTU negotiated fragment size
• the message header also indicates that the sequence number 606 and the fragment payload 610 are included in the packet 600.
• the end message header indicates that the fragment payload 610 includes the end of the message.
• the length of this message is determined by the remaining amount of data of the message that has not been sent as indicated by the message length 608.
• the end message header also indicates that the packet 600 includes the sequence number 606 and the fragment payload 610.
• the fragment acknowledgment header indicates that an acknowledgment 604 is included in the packet 600 regardless of whether the sequence number 606 or the fragment payload 610 is included.
• the keep alive header indicates that the message includes the sequence number 606 along with the header data but has no other fields.
• Sequence numbers enable detecting whether a local or remote BLE controller has reset or re-ordered its received GATT requests. Sequence numbers also facilitate the determination of BTP receive windows and transmission of keep-alive messages.
• All BTP message fragments are sent with a sequence number, excluding acknowledgement fragments with no keep-alive flag or data payload. These sequence numbers are unsigned 8-bit integers which increase monotonically by 1 for each message fragment sent with one. Sequences numbers are defined and incremented separately for each BTP connection maintained by a system. For each connection, the BTP stack on a single device will maintain separate sequence number counters for sent and received message fragments. When a new BTP connection is formed, its sequence numbers are initialized to a starting number (e.g., 0). Sequence numbers wrap back to the starting number once they exceed a size available to be represented in a predefined number (e.g., 8) of bits allocated for the sequence numbers.
• a starting number e.g., 0
• Sequence numbers wrap back to the starting number once they exceed a size available to be represented in a predefined number (e.g., 8) of bits allocated for the sequence numbers.
• a message fragment having a sequence number of 255 is followed by a message fragment having a sequence number of 0.
• a device If a device receives a message fragment with an unexpected sequence number, it resets the corresponding BTP connection. Such a failure indicates a failure of L2CAP's reliability mechanisms or an error on the BLE controller.
• Sequence number acknowledgements support the BTP receive window. Sequence number acknowledgments also provide a signal that the BTP stack on the other side of a connection remains up and healthy. [00141] When it sends a message fragment, the BTP stack starts a timer (the
• a fragment acknowledgement is deemed invalid if the acknowledged sequence number X does not fall within the shortest interval between Y and Z on the ring of sequence numbers with wrap-around, where Y is the sequence number of the oldest sent
• the BTP stack When the BTP stack receives a message fragment with a sequence number, the BTP stack records this sequence number as the connection's "pending acknowledgement” value and starts a timer (the "send acknowledgement” timer) if this timer is not already running.
• the duration of this timer is defined as one-half of the acknowledgement timeout interval to ensure acknowledgements will be received before a sender closes the connection for lack of them.
• the stack stops this timer when the pending acknowledgement is sent. If this timer expires and the stack has a pending acknowledgement, the acknowledgement is immediately sent as a fragment with no sequence number or message pay load. If the stack sends any message fragment before this timer expires, it piggybacks the pending
• the BTP stack detects that its number of pending acknowledgments to send has shrunk to an immediate-send threshold (e.g., 2 or fewer message fragments left in a receive window), it immediately sends any pending
• a receive window ensures proper sequencing by enabling application-layer flow control on top of GATT between both devices in a BTP connection.
• the receive window blocks fragment sequence numbers from wrapping unexpectedly.
• Both devices (e.g., client and server) of a BTP connection define a receive window, where the window size is the number of sequential message fragments each side determines that it can reliably receive without acknowledgment.
• an initial window size is established for both devices in a BLE connection as part of the BTP connect handshake.
• the receive window may have a maximum size that is decremented for pending interactions.
• the receive window is capped at half the number of possible sequence numbers.
• the maximum window size may be defined as 127. Setting such limit on the receive window blocks unacknowledged sequence number wrap-around. For example, such limits block receiving a newer initial sequence number 0 for a message fragment that is sent when an older expected number below the median sequence number 127 could also be received.
• both sides maintain a counter to reflect each other's current receive window size.
• the client 502 may maintain a counter to reflect a window size of the server 504. This counter is decremented whenever a new message fragment is sent. When a message acknowledgement is received, the counter is incremented by ((acknowledged sequence number - oldest unacknowledged sequence number) + 1). If the counter is 0, the sender refrains from sending further message fragments until the counter is incremented. If the counter is incremented from 0 on receipt of a message fragment, the sender immediately resumes message fragment transmission.
• both devices using BTP in a BLE connection maintain a counter of their own receive window sizes. These counters are based on the sequence numbers of the last message fragment received by the respective device and the last acknowledgement sent by the respective device. This counter is used to send early acknowledgements to prevent unnecessary latency in cases where a receiver's window size is 0.
• a device may send any pending message acknowledgments without waiting further for a message fragments on which the device might piggyback the acknowledgement. The device sends the pending message acknowledgments immediately regardless of whether the send acknowledgement timer is still ticking.
• some packets 600 may be indicated as a keep alive message.
• Keep alive messages may be used to determine whether the remote BTP stack in a given connection has crashed or stopped. Thus, keep alive messages ensure connectivity even when no application data is being sent or acknowledged, such as when the connection is idle at the message layer.
• the BTP stack stops its send acknowledgement timer and plays the BLE central (e.g., client 502) role in the corresponding connection, it starts a keep alive timer with a duration of one-half of the acknowledgement timeout interval. It restarts this timer when it sends any message fragment (including keep alive messages or other timer-driven acknowledgements) and the timer is already running. It stops this timer if it receives any message fragment with a sequence number. As the pending acknowledgement, this fragment generates temporarily removes the usefulness of explicit keep alive messages. If the send keep-alive timer expires, the stack sends a keep alive message, and the timer is restarted. As with regular payload-bearing message fragments, a lost keep-alive acknowledgement wdll cause the connection to be reset.
• the BLE central e.g., client 502
• Keep-alive messages are BTP message fragments with a valid sequence number, but a null payload. Though they are acknowledged by the receiver, keep-alive messages are not passed up the stack from the BTP message re-assembler to the next-higher layer, i.e. the higher-level protocol message layer. BTP keep alive messages thus do not interfere with the automatic closing of idle smart network connections based on the absence of message traffic.
• the BTP stack on the BLE central device will not send keep alive messages if the peripheral's receive window is full.
• the BTP stack stops its acknowledgement received timer and plays the BLE peripheral role (e.g., server 504) in the corresponding connection, it starts a keep alive received timer with a duration of the acknowledgement timeout interval. It restarts this timer whenever it receives any BTP message fragment. It stops this timer if it starts the acknowledgement received timer. If the keep alive received timer expires, the peripheral device resets the BTP connection. IV. Advertisements
• one of the devices when establishing a BLE connection between a first device 620 and a second device 622, one of the devices (e.g., device 620) sends out an advertisement 624 that indicates various details about the advertising device, any connected networks, and/or the potential BLE connection.
• Smart network devices advertise in a consistent format to use the limited advertisement data space. For example, the format may be restricted to 59 bytes with 28 designate to advertisements and 31 bytes designated for scan responses.
• the BLE advertisement may be used to indicate various details about the device, alarms, communication types, and/or networks to which the advertising device connects.
• the BLE advertisement may distinguish the advertising device from other devices, include a human-readable name for the advertising device, indicate an alarming or non- alarming state for the advertising device, indicate an alarming state for a device connected to the advertising device, identify class of the advertising device, identify whether the advertising device is paired to an account, and/or identify various information about services (i.e., groups of characteristics) to be used in a BLE communication resulting from coupling to the advertising device.
• services i.e., groups of characteristics
• the advertisement may include indications of supported BLE services using UUIDs.
• a general sendee UUID may be used to indicate that the device supports communication over a specific communication protocol (e.g., Weave).
• a critical event service UUID may be used to indicate that at a critical event (e.g., smoke detected) has occurred and should receive attention urgently.
• these sendee indicators e.g., UUID
• a general service may be included that indicates that data communication may occur over a specific protocol (e.g., Weave).
• a specific protocol e.g., Weave
• the advertising device and another remote device may communicate over BLE using the GATT structure, as previously discussed.
• the advertisement data may include the general sendee UUID.
• metadata may be associated with this sendee.
• the advertisement may contain identification information for the device. Additionally or alternatively, some embodiments may hide at least some of the identification information using an authentication token.
• the advertisement may be hidden/encrypted for a mobile authentication device that may physically move within Bluetooth range of devices that should not connect to the mobile authentication device nor share information about the mobile authentication device.
• the advertisement can indicate which types of information are included.
• the advertisement including the general sendee may include a sendee data field that identifies ty pes of weave data used.
• a first value indicates that device information is included in the advertisement
• a second value indicates that an authentication token is included without explicit recitations of device information.
• a hybrid communication type may be included that shares some information, but hides other information.
• other suitable data block types may be encoded into this field.
• the advertisement may include fields similar to those represented in Table 2 below.
• Account Pairing Status Indicates whether or not 1
• Table 2 includes indications of octet size for each field in the device information, some embodiments may increase or decrease these sizes based on
• the device class may include a vendor identifier (ID) that identifies a manufacturer or vendor of the device.
• the device class may also include a product identifier that identifies a specific device type provided by the vendor.
• the device ID may be an identifier used to identify the device in the smart network.
• the device ID may be a node ID for the device in the smart network.
• the account pairing status indicates whether the device is paired to an account on a remote service.
• some actions e.g., hushes of alarms
• hazard detectors that are not paired to the remote sendee cannot be hushed.
• hushing devices that have access to the account to which the hazard detector is paired.
• a hush key is generated by the senice that is passed to the hushing device (e.g., cellular phone) when the hushing device accesses the paired account on the remote sendee.
• the hazard detector will not accept hush commands without this hush key.
• this hush key may be common to any devices that are paired to or have access to a common account on the remote senice.
• the payload may be at least partially encrypted.
• version numbering may be unencrypted to provide an indication how to decrypt the advertisement to an authorized device receiving the encrypted advertisement.
• the version numbering may be encrypted either wdth the remainder of the advertisement or in its own encryption envelope that is decrypted consistently between authentication token versions.
• the advertisement may include details for the accompanying critical event service in addition to or in place of the general service.
• the advertisement would include an indication that the critical event service in the list of UUIDs supported and event-specific information categorizing the critical event.
• the critical event type may indicate a type of alarm being sent. In some embodiments, this critical event type may indicate what type of device originated the critical event. For example, an alarm (e.g., smoke alarm, CO alarm, heat alarm, etc.) from a hazard detector may be classified as a single critical event type. Each event type may have a defined length of octets that corresponds and will follow the event type field in the advertisement.
• Table 4 below represents a possible example of the event type-specific that may follow the event type field. Again, the below table includes a possible length for each field, but some embodiments may have different field sizes and/or vary the field size between implementations.
• the class event version indicates to which general class the critical event belongs.
• the class event may be a hazard detected (e.g., smoke, fire, CO, etc.), a security alarm, an irrigation problem, and/or other suitable event types that may be alerted in the smart network.
• the alarm challenge is used to ensure that any hush requests are timely.
• the alarm information includes a higher nibble that indicates an alarm type specific to the class event.
• the higher nibble of the alarm information indicating alarm type may be chosen from the values in Table 5 below:
• OxfD ALARM OTHER Other alarm condition not called out here. Check metadata for the specific alarm source.
• the lower nibble indicates a state for the alarm that may be chosen from the values in Table 6 below:
• some embodiments may include a human-readable name for the device.
• the human-readable name may be optional with a length up to a limit (e.g., 4 bytes) indicating the name of the device.
• the human-readable name may include a binary value for the text "d2.”
• the advertisement may also include additional manufacturer specific data in a manufacturer specific header (MSH).
• the MSH may include an AD type that that indicates advertisement data specific to the manufacturer. In some embodiments, this data may be allocated 1 byte (e.g., OxFF).
• the MSH may also include a manufacturer identifier code. In some embodiments, this identifier may have a
• this information may be taken from the vendor ID previously discussed.
• the data to be included in the advertisement cannot be included in a single advertisement packet due to size constraints or other constraints.
• the data to be advertised may be split between an advertisement packet and a scan response packet, both of which are relayed to the scanning device. Based on the operating system of the central device, these packets might be reported as separate events but then correlated in the scanning device. Based on splitting of data, critical information may be prioritized and included in the advertisement packet, which is sent before the scan response packet. The scan response packet may be provided later (e.g., in response to a scan request from the scanning device ).
• FIG. 13 illustrates an embodiment of an advertisement 630 divided into an advertisement packet 632 and the scan response packet 634. As illustrated, the advertisement packet 632 includes a list of UUIDs for the available services 636, such as the general service and the critical event service. Also, if a critical event has occurred and/or is occurring, the advertisement packet 632 includes critical service data 638.
• Data that is less time-critical may be included in the scan response packet 634 that may be sent along with the advertisement packet 632 and/or later (e.g., in response to a scan request).
• the scan response packet 634 may include general service data 640, a human-readable name 642, and/or a transmission power level 644.
• the general service data 640 and human-readable name 642 may conform to the example structures previously discussed.
• the transmission power level 644 may indicate at what level (e.g., in dBs) the communications are to occur.
• FIG. 14 illustrates an embodiment of an advertisement 650 that may be sent by a device over BLE.
• the advertisement 650 includes a length field 652 that indicates a length of the overall advertisement.
• the advertisement 650 also includes an AD type field 654 that indicates what type of data is included in one or more following fields and/or what type of data is referred to by the length field 652.
• the AD type field 654 when the AD type field 654 has a value (e.g., 0x02) that indicates that the length field 652 pertains to a metadata header 656 that includes the length field 652, the AD type field 654, and a List of UUIDs 658.
• the length field indicates the length of the data chunk (e.g., metadata header 656) to which the length field 652 and the AD type field 654 pertain.
• the length may indicate a length of the remaining fields of the data chunk. For example, in such embodiments and where the fields have lengths corresponding to those illustrated in FIG.
• the length field may have a value of 3 that indicates that the list of UUIDs 658 and the AD type field B4 have a total length of 3 bytes.
• the advertisement 650 may include a human-readable name data chunk 660.
• this human-readable name data chunk 660 provides a short human-readable name for the device transmitting the advertisement 650 that may be used for providing a short identification for the device for use in testing, diagnostics, and/or other suitable situations.
• some advertisements from a single device and/or in a single network may include the human-readable name data chunk 660 while other messages and/or devices in the network may be sent without the human-readable name data chunk 660.
• the human-readable name data chunk 660 includes a length field 662, an AD type field 664, and a name field 666.
• the length field 662 indicates a length of the human-readable name data chunk 660.
• the AD type field 664 includes a value (e.g., 0x16) that indicates that the data chink is the human-readable name data chunk 660 that informs a receiving device how to interpret the human-readable name data chunk 660.
• the name field 666 includes a string of characters that may be used to identify the sending device in a human-readable format (e.g., "t2"). In some embodiments, the string may be represented in UTF-8 or some other suitable character encoding.
• the advertisement 650 also includes a general service data chunk 668.
• the general service data chunk 668 includes a length field 670 that identifies a length of the general service data chunk 668 and an Ad type field 672 that includes a value (e.g., 0x16) that indicates that the general sendee data chunk 668 is of the general sendee type.
• the general service data chunk 668 also includes a general sendee UUID 674 for the general sendee.
• the general service data chunk 668 also includes a data block length field 676 for network'clevice data included in the advertisement.
• the data block length field 676 indicates a length of the general sendee data chunk 668 other than the general sendee UUID 674 and related wdiole chunk metadata fields (e.g., length field 670 and AD type field 672).
• the data block length field 676 may be omitted because the fields of the general sendee data chunk 668 wiiose length are not included in the data block length field 676 may be consistent in size between advertisements.
• the general sendee data chunk 668 may also include a data block type field 678 that identifies the data block length field 676 (when present) and the following data as data related to the device and/or its connected network(s).
• the general service data chunk 668 also includes version information 680 that indicates a version of encoding that informs a device receiving the advertisement 650 how to interpret the advertisement 650.
• the version information 680 includes a major version field 682 and a minor version field 684.
• the major version field 682 may include a value (e.g., 1) that is incremented when substantial updates are made to the advertisement 650 format
• the minor version field 684 may include a value (e.g., 2) that is incremented when less substantial updates are made to the advertisement 650 format.
• the values for the major version field 682 and the minor version field 684 may be combined to form a complete indication (e.g., v. 1.2) of the version. In some embodiments, these values may be any value that may be expressed using the available bytes. For example, if each version field is a byte, each version field may contain values from 0 to 255 before cycling.
• the general service data chunk 668 also includes a device identifier (ID) field 686 that may be used to identify the device within the smart network.
• the general service data chunk 668 also includes a device class identification 686.
• the device class information may include two subfields: a vendor ID field 688 and a product ID 690.
• the vendor ID field 688 indicates a vendor for the device, and the product ID 690 indicates the device type of the device specific to the vendor.
• the general sendee data chunk 668 also includes a service pairing status 692, as previously discussed.
• the advertisement 650 may be split into two or more packets: an advertisement packet and a scan response packet.
• the advertisement 650 is split into two packets; the length field 652, the AD type field 654, the list of UUIDs B4 form the advertisement packet with the human- readable name data chunk 660.
• this advertisement packet would have a size of 10 bytes.
• the scan response packet would consist of the general sendee data chunk and have a size of 21 bytes.
• FIG. 15 illustrates an embodiment of an advertisement 700.
• the advertisement 700 includes all the fields of the advertisement 650, but the advertisement 700 includes a critical event data chunk 702 that indicates that the advertising device is in an alarming state. Furthermore, when the advertisement 700 includes the general service data chunic 668 and the critical event data chunk 702, the List of UUIDs 658 may be longer in the advertisement 700 than the advertisement 650.
• the critical event data chunk 702 includes a length field 704 that indicates a length for the critical event data chunk 702.
• the critical event data chunk 702 also includes an AD type field 706 with a value (e.g., 0x16) that identifies the critical event data chunk 702 as a critical event data chunk.
• the critical event data chunlc 702 also includes a critical service UUID 708 that contains the UUID for the critical service.
• the critical event data chunk 702 also includes a critical event (CE) data block length field 710 for critical event data included in the advertisement.
• the CE block length field 710 indicates a length of the critical event data chunlc 710 other than the chunlc metadata fields (e.g., length field 704 and AD type field 706).
• the CE data block length field 710 may be omitted because the fields of the critical event data chunk 702 whose length are not included in the CE data block length field 710 may be consistent in size between advertisements.
• the critical event data chunk 702 also includes a critical event type 712 that indicates a type of critical event (e.g., an alarm event from a hazard detector, a security event, etc.)
• the critical event data chunlc 702 also includes an alarm event specification version 714 that indicates how the critical event data chunk 702 data should be interpreted.
• the critical event data chunk 702 also includes an alarm challenge 716 that includes a challenge code for the alarm related to the critical event.
• the challenge code is used to verify that any received hushes are timely by verifying that the received hush is substantially contemporaneous to the critical event.
• the challenge code may be a random value generated at the time of the alarm having a relatively small size such as 4-8 octets of data.
• the receiving device then pulls this code from the advertisement 700 and includes the challenge code in a related hush message.
• the hush message may be signed using the hush key over the challenge value (i.e., the challenge value is signed using the hush key).
• the alarming device determines that the challenge code and the hush key are proper. Then the alarming device sends a response message indicating that the alarm is alarm, an error occurred, or the alarm is unhushable, or some other suitable status.
• the critical event data chunk 702 also includes a number of events field 718 that indicates how many critical events are included in the critical event data chunk 702.
• the critical event data chunk 702 also includes an alarm type and alarm state field 720 that indicates a sub-type of alarm specific to the type of alarm indicated in the critical event type 712.
• the critical event data chunk 702 includes an additional alarm type and state field 722 for each additional critical event included.
• the alarm type and alarm state field 720 and the additional alarm type and state 722 may include values similar to those provided in Tables 5 and 6 above.
• the advertisement packet would have a size of 26 bytes, and the scan response packet would consist of the general service data chunk and have a size of 21 bytes.
• FIG. 16 shows block diagrams of an illustrative hazard detection system 1610 and an illustrative user device 1620, according to an embodiment. Just a few of the many different components of systems 1610 and 1620 are discussed to focus the discussion on embodiments related to acoustic location verification.
• System 1610 can include, among other components, wireless communications circuitry 1612, microphone 1614, and ultrasonic emitter 1616.
• User device 1620 can include, among other components, wireless
• Wireless communications circuitry 1612 and 1622 may be any suitable circuitry for enabling wireless communications between system 1610 and device 1620.
• circuitiy 1612 and 1622 may conduct Bluetooth low energy (BLE) communications, 802.11 communications, and/or 802.15.4 communications.
• Microphones 1614 and 1624 may be any suitable microphone.
• Ultrasonic emitters 1616 and 1626 can be any device capable of emitting high frequency acoustic energy.
• emitters 1616 and 1626 can be a speaker.
• FIG. 16 shows both system 1610 and device 1620 each having a microphone and an ultrasonic emitter, certain embodiments may have different arrangements. For example, in one embodiment, system 1610 may not have a microphone. As another example, user device 1620 may not have an ultrasonic emitter.
• the smart devices in the smart network include various sensors that track real-world conditions around the smart devices.
• the smart devices may include hazard detection, security devices, and/or other monitoring devices that alert building occupants of various situations. These devices may alarm upon detection of a critical event.
• a smart device 800 sends an alarm indication 802 to an electronic device 804.
• the electronic device 804 may include a cellular phone, tablet computer, laptop computer, a desktop computer, or any other electronic device capable of receiving the alarm indication 802 and transmitting the hush request 806.
• the alarm indication 802 may be a relatively low wireless signal, such as a BLE
• the smart device may also provide sonic or visual indicators to indicate that the detected event. However, in some embodiments, when the event is observed by an occupant who is aware of the event, the event is a false alann, and'Or other scenarios where the alarm is no longer useful in alerting the event, the alarm may be hushed using a hush request from the electronic device 804.
• hushing may be limited to devices within a predetermined proximity to the smart device 800 to ensure that an attempt has been made to investigate the cause or source of the alarm. Furthermore, as discussed below, the hush response includes some security features that ensure that only authorized individuals have the ability to hush the alarm.
• the wireless hushing enables hushing an alann at the smart device 800 without actually physically touching the smart device 800 without compromising on security or safety monitored by the smart device 800.
• the proximity verification may be prepared via a network-connected camera through which the electronic device 804 may be used to verify a condition causing the critical event.
• an alarm indication 808 may also be sent to a remote service 810 then relayed to the electronic device 804. Additionally or alternatively, the remote service 810 may be replaced with an access point or router for a wireless network.
• the smart device 800 may propagate the alarm and hushes to other devices 812 (e.g., hazard detectors, thermometers, etc.) in a network 814.
• the network 814 may include a different wireless communication type (e.g., 802.15.4) than is used by the hush interaction between the smart device 800 and the electronic device 804 (e.g., BLE).
• the electronic device 804 may display a notification of the alarm along with a notification that hushing is not enabled via the remote service 810.
• hushing may be enabled through the remote service 810 (or an access point or router) when proximity to the smart device 800 can be verified through another path. For example, if the electronic device 804 detects an electromagnetic, sonic, or visual signal from the smart device 800.
• certain alarm types may be unhushable without proximity verification while other alarm types are hushable regardless of proximity verification.
• a smoke alarm may be unhushable from remote connections, but a security alarm may be hushed remotely because the remote user is aware of a condition that would cause a security alarm, such as a visitor without a security system password or a scheduled action by an automated electronic device (e.g., vacuuming robot).
• hushability of an alarm may vary based on severity of an alarm. For example, if the alarm is a lower priority "heads-up" alert, the alarm may be hushed, but if the alarm indicates an actual critical event the alarm may not be hushed.
• the alarm when a hush attempt is made on an unhushable alarm, the alarm may not be hushed, but remote devices that are alarming may be hushed.
• a smart device in the basement may transmit notifications (e.g., audio and/or visual indications) of the alarm in the attic.
• the smart device in the basement may be hushed and cease transmitting notifications of the alarm.
• a connection to the smart device may be authenticated by using a program application on the electronic device 804 that is used to login to the remote service 810.
• the electronic device 804 may withhold a silencing option from a user interface (UI) if the electronic device 804 is not logged into the remote service 810 as an authenticated user for an account that is used to manage the smart device.
• the smart device 800 may block connection to the electronic device 804 until the electronic device 804 is authenticated for an account used to manage the smart device 800.
• FIG. 18 illustrates a flow chart diagram of a hushing process 820 that may occur at the electronic device 804.
• the electronic device 804 logs into the remote sendee 810 using an account name and password that corresponds to the smart device 800 (block 822). By logging into the account, the electronic device 804 may authenticate to the smart device 800.
• the remote service 810 may provide the electronic device 804 with a signature or a key to generate a signature that may be used to authenticate to any alarming devices to which the account pertains.
• the signature may be generated from the account password.
• the electronic device 804 receives an indication of a critical state in the smart device in a wireless signal 802 (block 824). For example, if the electronic device 804 receives a BLE advertisement that includes the critical service, the electronic device 804 can determine that the advertisement is an indication of a critical state for the smart device 800. Additionally or alternatively, the electronic device 804 may receive the indication via the remote service 810 via one or more networks, such as 802.11 or 802.15.4 networks.
• the electronic device 804 receives the indication only when an application program is active or running the background that causes the electronic device 804 to scan for the wireless signal 802. Thus, in such embodiments, the electronic device 804 may save on power consumption when the electronic device 804 is not readied to hush the smart device 800.
• the electronic device 804 displays an indication that a critical event has occurred (block 826).
• the displayed screen may vary based on various information about the indication.
• the electronic device 804 may determine whether the alarm is hushable (block 828). For example, alarms surpassing a threshold of severity and/or alarms that have been hushed more than a threshold number of hushes.
• hushability and/or factors that cause unhushability may be included in the BLE advertisement.
• an advertised alarm state in the BLE advertisement may include an indication of an unhushable alarm.
• the electronic device 804 may terminate the hush process even though the displayed indication may continue being displayed by the electronic device 804 (block 830). Moreover, the displayed indication may vary based on the termination of the hush process. For example, a hush option may be completely missing from the displayed indication when the alarm is not hushable. [00198] If the electronic device 804 does not determine that the alarm is unhushable, the electronic device 804 determines whether the electronic device 804 is proximal to the smart device 800 (block 832). For example, in some embodiments, if the electronic device 804 has received the indication via BLE, the electronic device 804 may determine that the smart device 800 is within a distance within a proximity threshold.
• the smart device 800 may transmit an sonic and/or optical signal that may be used by the electronic device 804 (or the smart device 800) to verify proximity between the electronic device 804 and the smart device.
• the smart device 800 may broadcast an ultrasonic signal that the electronic device 804 reproduces in
• the electronic device 804 presents a hush option (block 836). If the electronic device does not detect the broadcasted sonic signal or the smart device 800 responds that a hush request is rejected based on proximity, the electronic device may determine that the electronic device 804 is not close enough to the smart device 800 for hushing. In some embodiments, the electronic device 804 may present a different screen when proximity is not confirmed. For example, the hush option may be grayed-out as a notification that the electronic device 804 should be moved closer to the smart device 800 before hushing the smart device 800.
• the electronic device 804 may display an alert screen 900, as illustrated in FIG. 19.
• the alert screen 900 includes an icon 902 intended to draw attention to the screen 900.
• the icon 90 includes a flashing ring that has been changed to a color to indicate a level of alarm severity.
• the electronic device 804 may vibrate or emit sound to draw attention to the alert screen 900.
• the alert screen 900 also includes an alarm type 904 that indicates the type of critical event detected by the smart device 800.
• the alert screen 900 may also include additional information 906 about the critical event or what actions to take in response to the alarm.
• the alert screen 900 also indicates an alarm severity 908.
• the alert screen 900 may distinguish between one or more heads-up states and one or more alarming level states.
• the alert screen 900 also indicates a location 910 for the smart device 800 detecting the critical event.
• the alert screen 900 also includes an actions bar 912 that provides shortcuts to various actions that may be expected in response to the alarm.
• the actions bar 912 includes a tips button 914 that when selected provides more information regarding the critical event and what actions to take in response.
• the actions bar 912 also includes a call button 916 that, upon selection, causes the electronic device 804 to call or send a message to a pre-designated contact.
• the actions bar 912 also includes a silence alarm button 920.
• the silence alarm button 920 may be omitted from the screen, and if proximity between the smart device 800 and the electronic device 804 cannot be confirmed, the silence alarm button 920 may be grayed-out or otherwise indicating that the devices should be moved closer together to conduct hush.
• the electronic device 804 may present an explicit instruction to move the electronic device 804 closer to the smart device 800.
• a color of the alert screen 900 may be varied to indicate receipt of an alarm. For example, an all-clear page may be a first color (e.g., white) and the alert screen 900 may have a different color (e.g., black or dark gray).
• the location 910 may include a location (e.g., living room, kitchen, garage, etc.) for each alarming device in the smart network.
• the icon 902 may correspond to the highest priority alarm between each of the devices.
• various alarm types may be prioritized in level of severity such that the highest severity alarm is presented at the top of the list in the location 910.
• the alarms may be prioritized in descending order of severity: smoke alarm, carbon monoxide alarm, heads up smoke level notification, heads up carbon monoxide notification, and other heads up notifications.
• the electronic device 804 when hushing the alarm, the electronic device 804 receives a selection of the hush option (block 838). Upon receipt of the selection of the hush, the electronic device may present a hush confirmation screen 922, as illustrated in FIG. 20.
• the hush confirmation screen 922 includes hushing instructions 924 that instruct a user how to confirm an intent to hush the alarm after the silence button 920 has been pressed.
• the hushing instructions 924 instruct that hushing may be performed by pressing and holding a hushing button 926 to hush the alarm.
• the hushing instaictions 924 may give different instructions depending on a confirmation method, such confirming the hush with character entry, a biometric entry, a gesture, a button click, and/or another suitable input for confirming an intent to hush the alarm.
• a confirmation method such confirming the hush with character entry, a biometric entry, a gesture, a button click, and/or another suitable input for confirming an intent to hush the alarm.
• the confirmation may be a simple swipe in any direction, a compound gesture that includes multiple motions, a combination of a number of fingers and a related gesture, or some combination thereof.
• the confirmation screen 922 may also include additional instructions 928 regarding actions that might be taken in addition silencing the alarm, such as safety instructions related to the alarm type. For example, if a smoke alarm is occurring the additional instructions may include instructions to stay low during fire and check doors for heat before opening.
• the confirmation screen 922 also includes a cancel button 930 that provides a mechanism to indicate that h
• FIG. 21 illustrates an embodiment of the confirmation screen 922 showing change in the hushing button 926 during a held button press.
• the hushing button 926 includes a ring 932 that changes color as the hushing button 926 is held.
• the ring 932 provides feedback regarding how long the hushing button 926 has been held and how much longer the hushing button 926 is to be held before the hush has been confirmed.
• the ring 932 may be divided in a number (e.g., 2, 3, 4, 5, or more) arcs that change color as the hushing button 926 is held. For example, when there are 4 arcs and the hold duration is 2 seconds, each arc corresponds to a button hold of half a second.
• the arcs may change gradually from a dark color to a light color.
• the ring 932 includes two lighter color or brightness arcs 934, an intermediate color or brightness arc 936, and a darker color or brightness arc 938.
• the hushing button 926 has been held between 50% to 75% of a hush confirmation duration.
• the electronic device 804 may present a silencing screen, such as the silencing screen 940 illustrated in FIG. 22.
• the silencing screen 940 includes a visual hushing indicator 942 that a hush attempt is ongoing.
• the visual hushing indicator 942 includes a rotating ring indicating that the hushing attempt is ongoing.
• the silencing screen 940 includes a textual indicator 944 that indicates that the hushing attempt is ongoing.
• the textual indicator 944 and/or the visual hushing indicator 942 may include a countdown reflecting an amount of time before the electronic device 804 times out the hush attempt.
• the electronic device 804 establishes a connection to the smart device 800 based on the wireless signal receives from the smart device 800 (block 840).
• the electronic device 804 established a BLE pairing with the smart device 800 using the BLE advertisement.
• the electronic device 804 sends a hush request to the alarming smart device 800 (block 842).
• sending the hush request also includes a proximity verification and an authentication verification.
• the smart device 800 receives a challenge code as part of the received indication of the critical state.
• the electronic device 804 uses a pre-shared key retrieved from the service 810, the electronic device 804 creates a hush signature signs the challenge code using pre-shared key. Since both the electronic device 804 and the smart device 800 generate the hush signature, the smart device 800 can verify the hush signature and use it to authenticate the electronic device 804 and verify proximity of the electronic device 804 before approving the hush request.
• the electronic device 804 then receives a response from the smart device 800 indicating a status of the hush attempt (block 844). The electronic device 804 then determines whether the alarm was hushed (block 846). If the alarm was hushed, the electronic device 804 may display the hush result (block 848).
• FIG. 23 illustrates an example result screen 950 that may be used to indicate success or failure of the hush request.
• the result screen 950 indicates a successful hush as indicated by a hush status indicator 952 and textual hush status indicator 954.
• the result screen 950 may indicate that the hush has not occurred using the hush status indicator 952 with the "x" omitted.
• the textual hush status indicator 954 may recite "Alarm not silenced.”
• the result screen 950 may include additional text that notes what may happen next, such as listing a period of time after which the hush will end and the alarm will restart if the critical event has not ended.
• the electronic device 804 return to block 828 to reattempt the hush.
• the alarm may be marked as unhushable when a hush attempt is unsuccessful or the alarm exceeds a hushable threshold.
• high smoke levels may cause an alarm to be unhushable.
• various smoke level thresholds may be used by the smart device: a relatively low monitoring/holding level that increases sampling periods to track the smoke level more closely, one or more higher heads-up smoke levels that cause a relatively priority level alarm, a higher smoke level that causes a higher priority alarm, and an even higher smoke level that causes the alarm to become unhushable.
• the smart device 800 may have escalating levels of reactions to various levels of any measurement that the smart device 800 makes.
• the electronic device 804 closes the connection to the smart device 800 if not already closed by the smart device (block 850). By closing a BLE connection, the smart device 800 may restart advertisements with an updated alarm status, such as hushed or non-alarming. The electronic device 804 then receives the updated alarm state (block 852). In some embodiments, based on the updated advertisement, the electronic device may update an alert an alert screen 900 as illustrated in FIG. 24.
• the alert screen 900 may have the silence alarm button 920 grayed-out, and the location 910 may be appended with a status 956 of the alarm showing success or failure of the hush.
• FIGs. 25A and 25B illustrate a process 960 that may be performed by the smart device 800.
• the smart device 800 broadcast an advertisement for a wireless connection at a regular interval (block 962).
• the smart device 800 may broadcast an advertisement for BLE, WiFi, and/or some other network protocol.
• the smart device 800 may intermittently broadcast this message at regular intervals based on an alarm state.
• the smart device may broadcast the advertisement at a default rate (e.g., once every half second); if the alarm state is in an alarm state, the smart device 800 may broadcast at an alarm rate (e.g., once every 40 ms); and if the alarm state is hushed, the smart device 800 may broadcast a related advertisement at a hushed rate higher than the default rate but lower than the alarm rate (e.g., once every quarter second). In some embodiments, the hushed rate may be the same as the default rate. In other words, an advertisement corresponding to a hushed state would be sent as frequently as an advertisement
• the smart device 800 determines whether a critical event has occurred (block 964). If a critical event has not occurred, the smart device 800 continues to scan for such events while continuing to broadcast an advertisement for a connection. As discussed in more detail below, if a critical event is detected, the smart device 800 updates its alarm state to the alarming state (block 966). As part of updating to the alarming state, the smart device 800 updates its advertisement to include the previously discussed critical event service UUID 708 and other parts of the critical event data chunk 702 along with appropriate values for fields associated therewith, such as alarm type and severity. Updating the alarm state may also include broadcasting an audible or visual signal to indicate the critical event to an area around the smart device 800. For example, the smart device 800 may periodically buzz a buzzer and/or play audio messages indicating the nature of the critical event.
• the smart device 800 if the smart device 800 has not already generated an alarm challenge for this occurrence of the critical event, the smart device 800 generates the challenge code 716 to be used to ensure timeliness of any hushing requests (block 968).
• the alarm challenge 716 may include a randomly generated value generated at or near the time of detection of the critical event that is used to authenticate that a hush request received in response to the critical event is sent closely in-time to the detection of the critical event.
• the smart device 800 broadcasts the updated advertisement at the alarm rate (block 970).
• the smart device 800 also determines whether hush is enabled for the smart device 800 (block 972).
• hushing may be generally disabled or enabled for the smart device 800 via a user interface on the smart device, via a user interface as a general rale based on a device type of the device, based on a location of the device, or some combination thereof.
• the smart device 800 may indicate that hushes are disabled for the smart device 800 (thereby causing the electronic device 804 to disable and/or hide hushing in a user interface (e.g., alert screen 900) that displays a notification of detection of the critical event. If hushing is not enabled for the smart device 800, the hushing process 960 is ended for this alarm, but the hushing process 960 may restart at block 964 upon detection of a new critical event or when the smart device 800 becomes hushable.
• a user interface e.g., alert screen 900
• the smart device 800 then waits for a hush request to be received (block 974). Once a hush request is received, the smart device 800 determines whether the alarm is hushable (block 976). In some embodiments, hushing for a specific alarm may be disabled or enabled based on a type of alarm, severity of the alarm, previous hushing of the alarm, or some combination thereof. If In certain embodiments, the smart device 800 may indicate that hushes are disabled for the smart device 800 (thereby causing the electronic device 804 to disable and/or hide hushing in a user interface (e.g., alert screen 900) that displays a notification of detection of the critical event. In some embodiments, if hushing is not enabled for the alarm, the smart device 800 sends the electronic device 804 a response that reports an error hushing the alarm, because the alarm is not hushable (block 978). In some embodiments, a user interface (e.g., alert screen 900).
• the hushing process 960 may restart at block 964 upon detection of a new critical event or when the alarm becomes hushable. For example, if the alarm severity decreases, the alarm may become hushable.
• the smart device 800 determines whether the smart device 800 is within a threshold distance of the smart device 800 (block 980). For example, the smart device 800 may determine that the smart device 800 is within the threshold distance when the hush request is received over BLE or another wireless connection protocol with a known range. Additionally or alternatively, the smart device may broadcast an sonic (e.g., ultrasound) or visual (e.g., infrared) signal that the electronic device 804 includes in the hush request that the smart device 800 can use to determine that the electronic device 804 is wdthin the threshold distance (e.g., sonic or visual range) of the smart device 800.
• an sonic e.g., ultrasound
• visual e.g., infrared
• proximity may be determined using strength of signal levels for wireless communications, geospatial tracking (e.g., global positioning system location), detections of various electromagnetic fields (e.g., RFID, NFC), or other methods that may be used to ensure that alarms are disabled from a location where the critical event may have been monitored.
• geospatial tracking e.g., global positioning system location
• detections of various electromagnetic fields e.g., RFID, NFC
• the smart device 800 determines whether the hush is authorized (block 984). In some embodiments, the proximity verification and authorization verification may be combined into a single step. For example, as previously discussed, the hush request includes a hush signature that is generated using the challenge code 716 and a pre-shared key that the smart device 800 and the electronic device 804 that has been shared through the remote service. The smart device 800 and the electronic device 804 each have access to the challenge code 716 and the pre-shared key, and each generates the signature. In some embodiments, the smart device 804 may determine that the signature contains proper encryption using the pre-shared key but the signature is not signed over the correct challenge code.
• the smart device 800 may maintain copies of one or more old signatures generated using old challenge codes and a copy of a signature generated with a null code to use for comparison. When one of these signatures matches the hush signature received from the electronic device 804, the smart device 800 may respond with the proximity not authorized error. When the signature does not match any expected signatures, the smart device 800 responds to the electronic device 804 with a signature error (block 986). In some embodiments, the smart device 800 may wait for another hush response after sending the hushability error, the proximity error, or the signature error.
• the smart device 802 hushes the alarm (block 988).
• smart device 800 is connected to other smart devices in the smart network and caused them to alarm when the critical event was detected.
• the smart device 800 when the smart device 800 hushes the alarm locally, the smart device 800 propagates the hush to other alarming devices 800 in the smart network (block 990).
• initiation of the hushing propagation is limited to devices that originated the alarm by detecting the critical event.
• ensuring proximity verification of the electronic device 804 to the originating device ensures that a hush is requested when the totality of the situation causing the critical event may be inspected visually.
• the smart device 800 includes at least two wireless interface protocols through which communications may be made.
• the hush request may be received through a first wireless connection type (e.g., BLE), and the hush may be propagated through a second wireless connection type (e.g., 802.15.4).
• a first wireless connection type e.g., BLE
• a second wireless connection type e.g. 802.15.4
• the smart device 800 sends a hush response that indicates that the hush has been successfully completed (block 992).
• the smart device 800 closes a connection through which the hush request was received (block 994).
• the wireless connection between the electronic device 804 and the smart device 800 is a paired connection that ceases connection advertisements(e.g., BLE)
• the wireless connection is closed so that the smart device 800 can communicate its alarm states to more than a single device using connection advertisements as previously discussed.
• the connection may be closed by the smart device 800 and/or the electronic device 804 once the hush response is sent by the smart device 800 and/or received by the electronic device 804.
• the smart device 800 updates its wireless connection advertisement to a hushed alarm advertisement (block 998). For instance, the critical service data chunk 702 is updated to indicate that the alarm indicated in the advertisement.
• the smart device 800 also changes the advertisement period from the alarm rate to the hushed rate, which, in some embodiments, is the same as the default rate (block 1002).
• the smart device 1002 continues to wait until the hush timer has elapsed (block 1000). In other words, the hush has a limited duration of efficacy (e.g., 1 minute) after which the hush stops.
• the smart device 800 determines whether the critical event is still detected (block 1004). If the critical event is no longer in effect, hushing process 960 has ended for this alarm, but the process may begin again when another critical event is detected. Although the hushing process 960 has ended for the current alarm, there may be other active alarms with the smart device 800 currently alarming. If the critical event is in still in effect, the smart device 800 unhushes the alarm (block 1006). In some embodiments, unhushing the alarm may also include indicating that the alarm is now unhushable. In other words, in such embodiments, each alarm may be hushed only once. In certain embodiments, the smart device 800 may keep a hush counter for each alarm and set the alarm as unhushable when the hush counter has surpassed a hush limit threshold.
• FIG. 26 illustrates a state machine 1010 that may be used to determine a current state for the smart device 800.
• smart device 800 may broadcast a wireless communications type (e.g., BLE) advertisement that gives general information about the smart device 800 at a default rate.
• the smart device 800 blocks wireless connections through the wireless communication type.
• the smart device 800 starts in a default state 1012.
• the smart device transitions to an alarming state 1014.
• the smart device 800 broadcasts an advertisement over the wireless communications type that includes alarm information (e.g., critical event UUID, etc.) at a higher rate than the advertisement frequency in the default state 1012.
• alarm information e.g., critical event UUID, etc.
• the smart device 800 may allow connections via the wireless communications type to receive hush requests.
• the smart device 800 may also broadcast notifications of the alarm to other devices in the smart network using a propagation communications type (e.g., 802.15.4). From the alarming state 1014, if the event cease, the smart device 800 transitions back to the default state 1012.
• a propagation communications type e.g. 802.15.4
• the smart device 800 transitions through intermediate states, such a holding or monitoring state during which the smart device 800 determines whether the event is ongoing.
• a holding state may include a pre-alarm state used to sample data at a faster rate when a measurement approaches alarm thresholds (e.g., alarm threshold or heads-up threshold) to enable the smart device 800 to determine whether an alarming event has occurred.
• a monitoring state may include a post-alarm state used to sample data at a faster rate as the measurement is elevated but below the alarm thresholds. If the smart device determines that the event is still ongoing, the smart device 800 returns from holding or monitoring state and/or stays in the alarming state 1014. While in the alarming state 1014, the smart device 800 may receive a valid hush request.
• the smart device 800 may still propagate the hush to other devices in the smart network via the propagation communications type.
• the smart device 800 may receive a hush request via BLE and propagate the hush to other devices in the smart network via an 802.15.4 network connection and'or an 802.11 network connection even when the alarm may not be hushed at the smart device 800.
• the smart device 800 may hush the alarm and transition to a hushed state 1016.
• the smart device 800 broadcasts a connection for wireless communications type with an indication that the alarm is current but hushed.
• the advertisement broadcast frequency in the hushed state is less frequent than the advertisement broadcast frequency of the alarming state 1014.
• the advertisement broadcast frequency of the hushed state 1016 is as frequent as or more frequent than the default state 1012.
• the smart device 800 only stays within the hushed state 1016 for a limited period of time. In some embodiments, when the hushed period ends, if the critical event still exists, the smart device 800 returns to the alarming state 1014. Otherwise, the smart device 800 returns to the default state.
• the smart device passes through a holding state before returning to the default state 1012. Additionally or alternatively, in certain embodiments, the smart device 800 returns to the default state 1012 before determining whether the critical event exists. In such embodiments, when the critical event remains, the smart device 800 transitions from the default state 1012 to the alarming state 1014.
• a user can remotely hush a smoke alarm or other device by interacting with his or her user device.
• the hazard device may alert the user device by way of wireless comn uiications circuitry, and the user may be provided with a user interface screen that has a user selectable option to hush the alarm. W T hen the user selects that option to hush the alarm, the user device may communicate that instruction back to the hazard device by way of the wireless communications circuitry.
• the hush command can only be enforced when the user device is within a fixed distance from the hazard device.
• signals communicated via the wireless communications circuitry can have substantial range (e.g., a range extending beyond the confines of an enclosure having the hazard detector, ultrasonic signals are used in accordance with embodiments discussed herein to verify location of the user.
• the ultrasonic signals used by embodiments discussed herein may exist above the range of human hearing. Operating at these frequency ranges enables the hazard device and user device to communicate without annoying occupants of the enclosure containing the devices.
• the ultrasonic signals may be transmitted at a frequency of 18.5kHz or higher.
• the ultrasonic frequency may be 20kHz or 22kHz,
• the ultrasonic frequency may exist in the range between 18kHz and 22kHz.
• the upper limits of the ultrasonic frequency may be limited by the ultrasonic emitter (or speaker) residing in the hazard device and/or user device.
• FIG. 27 shows an illustrative floor plan of a house having hazard device 2710 positioned in the kitchen and user devices 2720-2723 positioned in the various locations as shown.
• the uniform dashed line can represent wireless signals being communicated between device 2710 and any one of user devices 2720-2723.
• the dash dot line can represent ultrasonic signals being emitted by devices 2720-2723. As shown, each user device is able to communicate with hazard device 2710 via the wireless signals.
• User device 2720 which is located outside of the house, is not able to penetrate the exterior walls of the house with its emitted ultrasonic signal.
• User device 2721 which is located in the family room, is also not able to penetrate the interior wall with its emitted ultrasonic signal.
• User device 2722 which is located in a room adjacent to the kitchen and within line of sight of hazard device 2710, is too far away from hazard device 2710 in order for its emitted ultrasonic signal to be received.
• User device 2723 which is located in the kitchen and within line of sight of hazard device 2710, is able to communicate its emitted ultrasonic signal to hazard detection device 2710.
• the ultrasonic signal can be encoded with any suitable data.
• the data can include identification information that identifies the device ID and/or the room ID.
• the data can include instructions such as hush instructions.
• the ultrasonic signal can be emitted as a pseudo random non-repeating pattern.
• the signals can include 4 bit symbols or can be concatenated to be sent in 8 bit symbols.
• FIG. 28 shows an illustrative acoustic data encoder 2800 according to an embodiment.
• Encoder 2800 can include linear feedback shift register (LFS ) 2810, upsampler 2812, carrier sine wave generator 2820, data wave generator 2830, multiplier 2840, high pass filter 2850, and output 2860.
• Encoder 2800 uses amplitude modulation on a carrier frequency to incorporate data into the ultrasonic signal emitted by output 2860.
• the carrier frequency (shown as X Hz) is set by carrier sine wave generator 2820 and provided to multiplier 2840.
• LFSR 2810 and upsampler 2812 function to inject random noise into multiplier 2840.
• Data is provided to data wave generator 2830, which sends the data to multiplier 2840.
• Multiplier 2840 mixes the noise, carrier frequency and data together and provides the combined signal to high pass filter 2850, which filters the signal before being emitted by output 2860.
• FIG. 29 shows an illustrative process 2900 in which the user device emits an ultrasonic signal for detection by the hazard detection system, according to an embodiment.
• FIG. 29 is divided in half to show steps performed by the hazard detection system and the user device, respectively.
• Process 2900 may begin at step 2902, where the hazard detection device detects an alarm event (e.g., smoke alarm, CO alarm, or pre-alarm alarm).
• an alarm event e.g., smoke alarm, CO alarm, or pre-alarm alarm.
• a wireless signal can be transmitted to alert devices of the detected alarm event.
• the wireless signal can be a BLE signal, WiFi signal, or 6LOWPAN signal to alert the user device.
• the user device can receive the wireless signal.
• a user interface may be displayed that enables the user to transmit a wireless signal to the hazard detection (2907).
• the user interface may provide an option to hush alarm (e.g., such as in FIG. XX).
• a user command to transmit the wireless signal can be received.
• the user device can transmit the wireless signal.
• the user device can emit an ultrasonic signal.
• the user device can simultaneously emit the ultrasonic signal and transmit the wireless signal.
• the user device may emit the ultrasonic signal at regular intervals after the user command to transmit the wireless signal is received or after the wireless signal is received from the hazard detection device.
• the hazard detection device can receive the wireless signal from the user device.
• the hazard detection device can determine whether the ultrasonic signal is detected, as step 2916. If the determination at step 2916 is NO, process 2900 can return to step 2914. If the determination at step 2916 is YES, the hazard detection device may transmit an acknowledgement of the received wireless signal to the user device, as shown in step 2918.
• an action may be performed in response to receiving the wireless signal (from the user device) while simultaneously detecting the ultrasonic signal being emitted by the user device). The performed action can be, for example, a silencing of a buzzing alarm.
• the user device can determine whether an acknowledgement has been received by the hazard detection device. If the determination is NO, process 2900 may return to step 2910. If the determination is YES, the user device may cease transmitting the wireless signal and cease emitting the ultrasonic signal (2924).
• FIG. 30 shows an illustrative process 3000 in which the hazard detection device emits an ultrasonic signal and the user device monitors for the presence of the ultrasonic signal, according to an embodiment.
• FIG. 30 is divided in half to show steps performed by the hazard detection system and the user device, respectively.
• Process 3000 may begin at step 3002, where the hazard detection device detects an alarm event (e.g., smoke alarm, CO alarm, or pre-alarm alarm).
• an alarm event e.g., smoke alarm, CO alarm, or pre-alarm alarm.
• a wireless signal can be transmitted to alert devices of the detected alarm event.
• the hazard detection device emits an ultrasonic signal.
• the wireless signal being emitted by the hazard detection device is received by the user device.
• the user device displays a user interface that enables a user to transmit a command via a wireless signal to the hazard detection device.
• a user command to transmit the instruction via the wireless signal can be received.
• a determination is made whether it detects the ultrasonic signal being emitted by the hazard detection device. If the determination is NO, the user device may instruct the user to move within line-of-sight of the hazard detection system, at step 3016, and then process 3000 reverts back to step 3014. If the determination is YES, the user device may transmit the wireless signal with the user initiated instruction, at step 3018.
• the wireless signal is received from the user device.
• an action can be performed (e.g., hushing of the buzzer) in response to receiving the wireless signal.
• FIG. 31 shows an illustrative process 3100 for encoding data into and decoding data out of an ultrasonic signal, according to an embodiment.
• FIG. 31 is divided in half to show steps performed by a transmitter of the ultrasonic signal and a receiver of the ultrasonic signal, respectively.
• the transmitter is discussed first.
• data can be encoded into an amplitude modulated carrier signal.
• data can be encoded into an acoustic signal using the encoder of FIG. CC.
• the encoded data signal can be provided to a speaker, which emits the encoded data signal as an acoustic signal.
• the receiver is now discussed.
• the acoustic signal can be received.
• a step 3122 the received acoustic signal is decoded to obtain the data encoded therein.
• the data is processed and appropriate actions are taken.
• FIG. 32 shows an illustrative process 3200 in which time-of-flight calculations are used to determine location of a user device relative to a hazard detection device, according to an embodiment.
• FIG. 32 is divided in half to show steps performed by an initiator and steps performed by a responder.
• the initiator can be the hazard detection device and the responder can be the user device, and in another embodiment, the initiator can be the user device and the responder can be the hazard detection device.
• a first acoustic signal can be emitted by the initiator at a first time period.
• the first acoustic signal can be an ultrasonic signal.
• the responder may receive the first acoustic signal, for example, via a microphone.
• the responder may transmit a second acoustic signal in response to receipt of the first signal.
• the second acoustic signal can be received at a second time period, at step 3216.
• a time-of-flight of the acoustic signal is calculated based on the first and second time periods. This calculation can be the difference between the first and second time periods.
• a distance between the initiator and the responder can be determined based on the calculated time-of-flight and speed of the acoustic signal. For example, the distance can be calculated by multiplying the calculated time-of-flight and the speed of the signal as it travels through the air.
• a determination is made as to whether the distance is within an actionable range. If the determination is NO, process 3200 can revert back to step 3210. If the determination is YES, an action can be performed (e.g., hush buzzer) at step 3224.

Landscapes

• General Physics & Mathematics (AREA)
• Business, Economics & Management (AREA)
• Emergency Management (AREA)
• Physics & Mathematics (AREA)
• Engineering & Computer Science (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Computer Security & Cryptography (AREA)
• Alarm Systems (AREA)
• Selective Calling Equipment (AREA)
• Burglar Alarm Systems (AREA)
• Measurement Of Velocity Or Position Using Acoustic Or Ultrasonic Waves (AREA)
• Emergency Alarm Devices (AREA)

Priority Applications (4)

Applications Claiming Priority (2)

Publications (1)

Family

ID=58615658

Family Applications (1)

Country Status (5)

Cited By (2)

Families Citing this family (24)

Citations (7)

Family Cites Families (41)

• 2015
  • 2015-12-31 US US14/986,398 patent/US9640061B1/en active Active
• 2016
  • 2016-11-22 CN CN201680053774.8A patent/CN108028009B/zh active Active
  • 2016-11-22 EP EP16882252.6A patent/EP3398177A4/de active Pending
  • 2016-11-22 CN CN202010362786.7A patent/CN111613001B/zh active Active
  • 2016-11-22 WO PCT/US2016/063395 patent/WO2017116586A1/en unknown
  • 2016-11-22 JP JP2018513365A patent/JP6537710B2/ja active Active
• 2017
  • 2017-03-31 US US15/476,069 patent/US10026297B2/en active Active
• 2019
  • 2019-06-04 JP JP2019104485A patent/JP6832389B2/ja active Active

Patent Citations (7)

Also Published As

Similar Documents

Legal Events